working deploy

create-nginx.yml

@@ -13,6 +13,7 @@
 
 
 - hosts: nginx-launched
+  gather_facts: False
   vars:
     username: david
     nginx_user: www-data
@@ -20,7 +21,7 @@
     public_key: "{{ lookup('env','HOME') }}/.ssh/id_rsa.pub"
   user: root
   roles:
+   - ssh
    - common
-     #   - user
-     #   - nginx
-     #   - ssh
+   - user
+   - nginx

roles/ssh/tasks/main.yml

@@ -1,4 +1,7 @@
-- name: add pk to user
-  authorized_key:
-    user: "{{ username }}"
-    key: "{{ lookup('file', public_key) }}"
+- name: Disable empty password sshd login
+  lineinfile: dest=/etc/ssh/sshd_config regexp="^#?PermitEmptyPasswords" line="PermitEmptyPasswords no"
+  notify: restart sshd
+
+- name: Disable password sshd login
+  lineinfile: dest=/etc/ssh/sshd_config regexp="^#?PasswordAuthentication" line="PasswordAuthentication no"
+  notify: restart sshd