- name: ensure sshd is configured
  template:
    src=sshd_config.j2
    dest=/etc/ssh/sshd_config
    mode=0600
  notify: restart sshd