---

- name: unbound | Load system-specific vars
  include_vars: "{{ ansible_system | lower }}.yml"

- name: sshd | Deploy sshd_config
  template:
    src:   "{{ sshd_config_template }}"
    dest:  /etc/ssh/sshd_config
    mode:  "{{ sshd_config_props.mode }}"
    owner: "{{ sshd_config_props.owner }}"
    group: "{{ sshd_config_props.group }}"
    validate: sshd -t -f %s
  notify: sshd | Apply config

- name: sshd | Enable and start service
  service:
    name: sshd
    state: started
    enabled: yes

- name: sshd | Run handlers
  meta: flush_handlers