- name: create sshd_config
  template:
    src: "sshd_config.j2"
    dest: /etc/ssh/sshd_config
    owner: root
    group: root
    mode: '0644'
  notify: sshd restart
  when: run_once_sshd is not defined

- name: run the sshd tasks once
  set_fact:
    run_once_sshd: true
  when: run_once_sshd is not defined