handlers:
  - name: "Restart sshd"
    service:
      name: "sshd"
      state: "restarted"

  - name: "Disable root login via SSH"
    lineinfile:
      dest: "/etc/ssh/sshd_config"
      regexp: "^PermitRootLogin"
      line: "PermitRootLogin no"
    notify: "Restart sshd"