Ansible C1 Playbook

c1.yml

---
- hosts: c1
  become: yes
  
  tasks:
    - name: ensure ssh root login is disabled
      lineinfile:
        dest: /etc/ssh/sshd_config
        state: present
        regexp: "^PermitRootLogin"
        line: PermitRootLogin no
      notify: reload ssh
      tags: ssh

    - name: ensure ssh password login is disabled
      lineinfile:
        dest: /etc/ssh/sshd_config
        state: present
        regexp: "^PasswordAuthentication"
        line: PasswordAuthentication no
      notify: reload ssh
      tags: ssh

  handlers:
    - name: reload ssh
      service: 
        name: ssh
        state: reloaded