Add sshd_config

roles/common/handlers/main.yml

@@ -0,0 +1,7 @@
+---
+
+- name: Restart sshd service
+  become: true
+  ansible.builtin.systemd:
+    name: sshd
+    state: restarted

roles/common/tasks/main.yml

@@ -28,3 +28,13 @@
 - name: Setup etckeeper
   ansible.builtin.include_role:
     name: etckeeper
+
+- name: Copy sshd_config
+  become: true
+  ansible.builtin.template:
+    src: sshd_config.j2
+    dest: /etc/ssh/sshd_config.d/00-lime2.conf
+    mode: "644"
+    owner: root
+    group: root
+  notify: Restart sshd service

roles/common/templates/sshd_config.j2

@@ -0,0 +1,4 @@
+# {{ ansible_managed }}
+
+PermitRootLogin no
+PasswordAuthentication no