- name: Disable root login
  lineinfile:
    path: "{{ sshd_config_file }}"
    regexp: "^PermitRootLogin"
    line: "PermitRootLogin no"
    backup: yes
  notify: restart sshd