---
# Configure OpenSSH server
- name: Configure OpenSSH server
  template:
    src: openssh/sshd_config.j2
    dest: /etc/ssh/sshd_config
    backup: yes
    owner: "0"
    group: "0"
    mode: "0644"
    validate: '/usr/sbin/sshd -T -f %s'
  notify: restart openssh

- name: Trigger OpenSSH handlers
  meta: flush_handlers

- name: Change Ansible SSH port to {{ openssh_port }}
  set_fact:
    ansible_port: "{{ openssh_port }}"
  when: openssh_port != "22"