Sync from polyfloyd infra

roles/common/tasks/main.yaml

@@ -76,18 +76,18 @@
     insertafter: '^PATH'
     line: 'MAILTO={{ notify_email }}'
 
-- name: Turn off SSH password auth
+- name: Configure SSH
   lineinfile:
     path: /etc/ssh/sshd_config
-    regexp: '^#?PasswordAuthentication'
-    line: 'PasswordAuthentication no'
-  notify: reload sshd
-
-- name: Configure SSH port
-  lineinfile:
-    path: /etc/ssh/sshd_config
-    regexp: '^#?Port'
-    line: 'Port {{ ssh_port }}'
+    regexp: "{{ item.regexp }}"
+    line: "{{ item.line }}"
+  with_items:
+    - regexp: '^#?Port'
+      line: 'Port {{ ssh_port }}'
+    - regexp: '^#?PasswordAuthentication'
+      line: 'PasswordAuthentication no'
+    - regexp: '^#?DebianBanner'
+      line: 'DebianBanner no'
   notify: reload sshd
 
 - name: Allow SSH