Disable SSH password auth in the common role only when sshd is active

2026-10-09 14:37:24 +00:00
parent 13d60c4f9b
commit 6390e6288b
1 changed files with 19 additions and 11 deletions
@@ -1,12 +1,20 @@
- name: Disable SSH password auth
-  lineinfile:
-      dest: /etc/ssh/sshd_config
-      regexp: '^PasswordAuthentication\s*yes'
-      line: "PasswordAuthentication no"
-  register: sshd_config
+- name: Check if SSH daemon is active
+  systemd:
+    name: sshd
+    state: started
+  register: sshd_status

- name: Restart SSH daemon
-  service:
-      name: sshd
-      state: restarted
-  when: sshd_config.changed
+- block:
+    - name: Disable SSH password auth
+      lineinfile:
+        dest: /etc/ssh/sshd_config
+        regexp: '^PasswordAuthentication\s*yes'
+        line: "PasswordAuthentication no"
+      register: sshd_config
+
+    - name: Restart SSH daemon
+      service:
+        name: sshd
+        state: restarted
+      when: sshd_config.changed
+  when: sshd_status.status.ActiveState == 'active'