Refs #8025 Rol debian-base. Task ssh to conf.d directory

roles/debian-base/tasks/ssh.yml

@@ -5,13 +5,17 @@
     size: 4096
   register: new_pair
 - name: Configure sshd_config settings
-  lineinfile:
+  copy:
-    path: /etc/ssh/sshd_config
+    dest: /etc/ssh/sshd_config.d/custom.conf
-    regexp: "{{ item.regexp }}"
+    content: |
-    line: "{{ item.line }}"
+      # Do not edit this file! Ansible will overwrite it.
-  loop:
+      
-    - { regexp: '^#ListenAddress 0.0.0.0', line: 'ListenAddress 0.0.0.0' }
+      ListenAddress 0.0.0.0
-    - { regexp: '^#SyslogFacility AUTH', line: 'SyslogFacility AUTH' }
+      SyslogFacility AUTH
+      permitRootLogin yes
+  owner: root
+  group: root
+  mode: '0644'
 - name: Delete old host SSH keys
   file:
     path: "{{ item }}"