---

- name: ensure sshd is enabled
  ansible.builtin.systemd:
    name: sshd
    enabled: true
  tags: all,ssh

- name: deploy sshd_config
  ansible.builtin.template:
    src: sshd_config.j2
    dest: /etc/ssh/sshd_config
    owner: root
    group: root
    mode: 0644
    validate: "sshd -T -f %s"
  notify: restart ssh
  tags: all,ssh

- name: deploy rsyslog conf
  ansible.builtin.template:
    src: auth.conf.j2
    dest: /etc/rsyslog.d/auth.conf
    owner: root
    group: root
    mode: 0644
  notify: restart rsyslog
  tags: all,ssh