- name: Get switch password
  set_fact:
    ansible_ssh_pass: '{{ lookup("passwordstore", "switch/"~inventory_hostname, subkey="pass") }}'

- name: Set configuration
  ansible.netcommon.cli_config:
    config: '{{ lookup("template", "config-"~manufacturer~"-"~device_type~".j2") }}'
  register: result
  # These lines are not displayed by 'sho ru' and always reported as different, so ignore them.
  changed_when: result.commands | reject('match', '^(no shutdown|no switchport access vlan|switchport mode access|switchport mode hybrid|interface .*|no enable service web-server https?)$')
  notify: write config