---
- name: Copy sshd_config
  ansible.builtin.template:
    src: templates/ssh/sshd_config
    dest: /etc/ssh/sshd_config
    mode: "644"
  notify:
    - Restart sshd
  become: true

- name: Copy pubkey
  ansible.builtin.copy:
    src: files/ssh/vault-ca.pub
    dest: "/etc/ssh/vault-ca.pub"
    mode: "644"
  become: true