feat: sshd config

playbook.yaml

@@ -3,6 +3,7 @@
   roles:
     - monitoring-client
     - monitoring-logs
+    - sshd-config
 
 - hosts: monitoring
   roles:

roles/sshd-config/handlers/main.yml

@@ -0,0 +1,4 @@
+- name: reload sshd
+  systemd:
+    name: sshd
+    state: reloaded

roles/sshd-config/tasks/main.yaml

@@ -0,0 +1,14 @@
+- name: SSH Listen Port 7000
+  lineinfile:
+    path: /etc/ssh/sshd_config
+    line: 'Port 7000'
+  notify:
+    - reload sshd
+
+- name: SSH Listen Port 22 (safety)
+  lineinfile:
+    path: /etc/ssh/sshd_config
+    regexp: '^#Port 22'
+    line: 'Port 22'
+  notify:
+    - reload sshd