Sudoers config and hostname config working

roles/sshd/vars/main.yml

@@ -1,8 +1,13 @@
-#code: language=ansible
+# code: language=ansible
 
 sshd_port: 22
 
-sshd_config_lines:
+sshd_user: ladmin
+
+sshd_address_family: "{{ (ipv4_only | default(false)) | ansible.builtin.ternary('inet', 'any') }}"
+sshd_required_family_for_online: "{{ (ipv4_only | default(false)) | ansible.builtin.ternary('ipv4', 'both') }}"
+
+sshd_ipv4_config_lines:
   - label: PubkeyAuthentication
     pattern: '^\s*#*\s*PubkeyAuthentication\s*(yes|no)$'
     line: 'PubkeyAuthentication yes'
@@ -29,19 +34,24 @@ sshd_config_lines:
     line: 'UsePAM yes'
   - label: PermitRootLogin
     pattern: '^\s*#*\s*PermitRootLogin\s*(yes|no|prohibit-password)$'
-    line: 'PermitRootLogin prohibit-password'
+    line: 'PermitRootLogin no'
   - label: AddressFamily
     pattern: '^\s*#*\s*AddressFamily\s*(inet|inet6|any)$'
-    line: 'AddressFamily any'
+    line: "AddressFamily {{ sshd_address_family }}"
   - label: ListenAddress (IPv4)
     pattern: "^\\s*#*\\s*ListenAddress\\s*(0\\.0\\.0\\.0|{{ ipv4_address | replace('.', '\\.') }})$"
     line: "ListenAddress {{ ipv4_address }}"
-  - label: ListenAddress (IPv6)
-    pattern: "^\\s*#*\\s*ListenAddress\\s*(::|{{ ipv6_address}})$"
-    line: "ListenAddress {{ ipv6_address }}"
   - label: Port
     pattern: '^\s*#*\s*Port\s*[0-9]{1,5}$'
     line: "Port {{ sshd_port }}"
+  - label: AllowGroups
+    pattern: '^\s*#*\s*AllowGroups\s*.*$'
+    line: "AllowGroups ssh"
+
+sshd_ipv6_config_lines:
+  - label: ListenAddress (IPv6)
+    pattern: "^\\s*#*\\s*ListenAddress\\s*(::|{{ ipv6_address }})$"
+    line: "ListenAddress {{ ipv6_address }}"
 
 sshd_ufw_ipv4_rules:
   - comment: SSH Clients v4
@@ -55,4 +65,4 @@ sshd_ufw_ipv6_rules:
   - comment: "SSH Clients v6"
     source: "2600:4040:593d:8b30::/64"
   - comment: "SSH Servers v6"
-    source: "2600:4040:593d:8b10::/64"
+    source: "2600:4040:593d:8b10::/64"