--- - name: Disable remote login for root copy: src: sshd/denyroot.conf dest: /etc/ssh/sshd_config.d/denyroot.conf owner: "{{ primary_root_acct }}" group: "{{ primary_root_acct }}" force: yes register: sshroot_disabled tags: ['default', 'deny_sshroot']