---
# OpenSSH hardening handlers.

- name: validate sshd config
  ansible.builtin.command: "sshd -t"
  listen: "reload sshd config"

- name: restart sshd
  ansible.builtin.service:
    name: sshd
    state: restarted
  listen: "reload sshd config"