that was so silly + restart sshd after disablepasswd

playbooks/setup/server/natsuco.yaml

@@ -12,6 +12,7 @@
           include_role:
             name: kevinnlsamuel.galaxy.sshd.disablepasswd
         - name: change ssh port
+          when: false
           template:
             src: sshd/00-altport.conf
             dest: /etc/ssh/ssh_config.d/00-altport.conf

roles/sshd/disablepasswd/tasks/main.yml

@@ -1,4 +1,8 @@
 - name: disable password auth
   copy:
     src: 00-nopasswd.conf
-    dest: /etc/ssh/ssh_config.d/00-nopasswd.conf
+    dest: /etc/ssh/sshd_config.d/00-nopasswd.conf
+- name: restart sshd
+  service:
+    name: sshd
+    state: restarted