- name: Accès uniquement par clé ssh
  lineinfile:
    dest: /etc/ssh/sshd_config
    state: present
    backrefs: yes
    regexp: "^PasswordAuthentication yes"
    line: "PasswordAuthentication no"
  notify: restart sshd

- name: Décommenter option par défaut
  lineinfile:
    dest: /etc/ssh/sshd_config
    state: present
    backrefs: yes
    regexp: "^#PermitRootLogin yes"
    line: "PermitRootLogin yes"
  notify: restart sshd