Move files to this submodule

tasks/openssh.yml

@@ -0,0 +1,15 @@
+- name: Add hardened SSH config
+  copy:
+    src: etc/ssh/sshd_config
+    dest: /etc/ssh/sshd_config
+    owner: root
+    group: root
+    mode: 0600
+  register: config_change
+
+- name: Reload SSH daemon after config change
+  systemd:
+    name: ssh.service
+    daemon_reload: yes
+    state: reloaded
+  when: config_change.changed