---

- name: openssh - install
  apt: name=openssh-server

- name: openssh - start and enable
  service: name=ssh state=started enabled=yes

- name: openssh - config
  template: dest=/etc/ssh/sshd_config src=sshd_config.j2 owner=root group=root mode=0600
  notify: reload openssh

- name: openssh - root keys
  authorized_key: user="root" key="{{ common_openssh_keys_root | join("\n") }}" exclusive=yes
  when: common_openssh_keys_root
  tags: 'ssh-keys'