---
- name: Write restrictions to crypto-policy file
  template:
    src: 'sshd_config_hardening.j2'
    dest: '/etc/crypto-policies/back-ends/opensshserver.config'
    owner: root
    group: root
    mode: 0600
    backup: yes
  notify: Restart SSH