---
- name: Déployer le hardening SSH additionnel
  ansible.builtin.template:
    src: 20-chezlepro-hardening.conf.j2
    dest: /etc/ssh/sshd_config.d/20-chezlepro-hardening.conf
    owner: root
    group: root
    mode: "0644"
  notify: Validate and reload ssh