Ansible: quickly disable ssh roaming + upgrade ssh-server + openssl for all your servers

hotfix.yml

---
# Disable roaming for all servers, upgrade ssh-server + openssl
# you can test with: ssh whoami.filippo.io
# run with: ansible-playbook -i YOURINVENTORY hotfix.yml
- hosts: all
  tasks:
    - lineinfile:
        insertafter: 'Host *'
        line: '  UseRoaming no'
        dest: '/etc/ssh/ssh_config'
      notify: 'reload ssh'
    - apt:
        update_cache: yes
        pkg: '{{item}}'
        state: latest
      with_items:
        - openssl
        - openssh-server
  handlers:
    - name: 'reload ssh'
      service: name=ssh state=reloaded