Sync from polyfloyd infra

roles/common/tasks/main.yaml

@@ -76,18 +76,18 @@
     insertafter: '^PATH'
     line: 'MAILTO={{ notify_email }}'
 
-- name: Turn off SSH password auth
+- name: Configure SSH
   lineinfile:
     path: /etc/ssh/sshd_config
-    regexp: '^#?PasswordAuthentication'
+    regexp: "{{ item.regexp }}"
-    line: 'PasswordAuthentication no'
+    line: "{{ item.line }}"
-  notify: reload sshd
+  with_items:
-
+    - regexp: '^#?Port'
-- name: Configure SSH port
+      line: 'Port {{ ssh_port }}'
-  lineinfile:
+    - regexp: '^#?PasswordAuthentication'
-    path: /etc/ssh/sshd_config
+      line: 'PasswordAuthentication no'
-    regexp: '^#?Port'
+    - regexp: '^#?DebianBanner'
-    line: 'Port {{ ssh_port }}'
+      line: 'DebianBanner no'
   notify: reload sshd
 
 - name: Allow SSH