secssh.yml

---
- name: Secure SSH
  vars: 
    p_users: ["test1", "test2", "laozi"]
  hosts: servers
  tasks:
  - name: Copy sshd_config
    ansible.builtin.copy:
      src: ./sshd_config
      dest: /etc/ssh/sshd_config
      remote_src: no
  - name: Allow Password login for users
    ansible.builtin.lineinfile:
      path: /etc/ssh/sshd_config
      regexp: '^Match User'
      line: "Match User {{ p_users | join(',') }}"
      backrefs: yes
      state: present
  - name: Restart sshd
    service:
      name: sshd
      state: restarted