- name: Enable SSH root login in sshd_config
  lineinfile:
    path: /etc/ssh/sshd_config
    regexp: '^#?PermitRootLogin'
    line: 'PermitRootLogin prohibit-password'
    state: present
  notify: restart sshd

- name: Ensure ssh service is started and enabled
  systemd:
    name: ssh
    enabled: yes
    state: started
  when: ansible_os_family == 'Debian'

- name: Ensure sshd service is started and enabled
  systemd:
    name: sshd
    enabled: yes
    state: started
  when: ansible_os_family == 'Archlinux'