---

- name: openssh - install
  apt: name=openssh-server

- name: openssh - start and enable
  service: name=ssh state=started enabled=yes

- name: openssh - config
  template:
      dest: /etc/ssh/sshd_config
      src: sshd_config.j2
      owner: root
      group: root
      mode: 0600
      validate: '/usr/sbin/sshd -T -f %s'
  notify: reload openssh

- name: openssh - root keys
  authorized_key: user="root" key="{{ common_openssh_keys_root | join("\n") }}" exclusive=yes
  when: common_openssh_keys_root
  tags: 'ssh-keys'

- name: openssh - truncate /etc/motd
  copy: dest=/etc/motd content='' force=yes