- name: Disable SSH password auth
  lineinfile:
      dest: /etc/ssh/sshd_config
      regexp: '^PasswordAuthentication\s*yes'
      line: "PasswordAuthentication no"
  register: sshd_config

- name: Restart SSH daemon
  service:
      name: sshd
      state: restarted
  when: sshd_config.changed