IaC/ansible/roles/sshd/tasks/main.yml

---
- name: install openssh
  ansible.general.pacman:
    name: "{{ openssh_packages }}"
    state: latest
    update_cache: true
    reason: explicit
  when:
    - ansible_os_family == 'Arch'

- name: add authorized keys
  ansible.builtin.copy:
    dest: "/home/{{ ansible_user }}/.ssh/authorized_keys"
    src: "{{ authorized_keys_file }}"
    mode: 0600
    owner: "{{ ansible_user }}"
    group: "{{ ansible_user }}"

- name: configure openssh
  ansible.builtin.copy:
    dest: "{{ openssh_configuration_file }}"
    src: "{{ openssh_configuration_src }}"
    mode: "{{ openssh_configuration_mode }}"
    owner: root
    group: root
  notify:
    - restart openssh

- name: start and enable openssh
  ansible.builtin.service:
    name: "{{ openssh_service }}"
    state: started
    enabled: yes

- name: flush handlers
  ansible.builtin.meta: flush_handlers
  when:
    - openssh_restart_immediately