Disable SSH password auth in the common role only when sshd is active

common/tasks/ssh.yml

@@ -1,12 +1,20 @@
-- name: Disable SSH password auth
+- name: Check if SSH daemon is active
+  systemd:
+    name: sshd
+    state: started
+  register: sshd_status
+
+- block:
+    - name: Disable SSH password auth
       lineinfile:
         dest: /etc/ssh/sshd_config
         regexp: '^PasswordAuthentication\s*yes'
         line: "PasswordAuthentication no"
       register: sshd_config
 
-- name: Restart SSH daemon
+    - name: Restart SSH daemon
       service:
         name: sshd
         state: restarted
       when: sshd_config.changed
+  when: sshd_status.status.ActiveState == 'active'