---
  - name: prohibit ssh login with password
    become: yes
    lineinfile:
      path: /etc/ssh/sshd_config
      regexp: '#PasswordAuthentication yes'
      line: 'PasswordAuthentication no'
      state: present
      backrefs: yes
    notify: restart_sshd