---
- name: only allow login with key
  lineinfile:
    path: /etc/ssh/sshd_config
    line: PasswordAuthentication no
  notify: restart-sshd