- block:
    - name: create sshd_config
      template:
        src: "sshd_config.j2"
        dest: /etc/ssh/sshd_config
        owner: root
        group: root
        mode: '0644'
      notify: sshd restart

    - name: run the sshd tasks once
      set_fact:
        run_once_sys_svc_sshd: true
  when: run_once_sys_svc_sshd is not defined