- name: Configure sshd
  become: true
  ansible.builtin.template:
    src: sshd_config.j2
    dest: /etc/ssh/sshd_config
    owner: root
    group: root
    mode: '644'
    validate: /usr/sbin/sshd -t -f %s
  notify: sshd_restart

- name: Restart sshd service if necessary
  ansible.builtin.meta: flush_handlers