From 322a14a882bb35f153b3795b7a177d2d293320ef Mon Sep 17 00:00:00 2001
From: kevinnls <developer@kevinnlsamuel.com>
Date: Fri, 23 Oct 2026 23:00:10 +0530
Subject: [PATCH] let's turn these into roles

---
 playbooks/setup/server/natsuco.yaml                         | 5 ++---
 .../sshd/disablepasswd/files}/00-nopasswd.conf              | 0
 roles/sshd/disablepasswd/meta/main.yml                      | 6 ++++++
 roles/sshd/disablepasswd/tasks/main.yml                     | 4 ++++
 4 files changed, 12 insertions(+), 3 deletions(-)
 rename {playbooks/setup/server/files/sshd => roles/sshd/disablepasswd/files}/00-nopasswd.conf (100%)
 create mode 100644 roles/sshd/disablepasswd/meta/main.yml
 create mode 100644 roles/sshd/disablepasswd/tasks/main.yml

diff --git a/playbooks/setup/server/natsuco.yaml b/playbooks/setup/server/natsuco.yaml
index 1a8ed76..c22fa88 100644
--- a/playbooks/setup/server/natsuco.yaml
+++ b/playbooks/setup/server/natsuco.yaml
@@ -9,9 +9,8 @@
     - name: harden ssh
       block:
         - name: disable password auth
-          copy:
-            src: sshd/00-nopasswd.conf
-            dest: /etc/ssh/ssh_config.d/00-altport.conf
+          include_role:
+            name: kevinnlsamuel.galaxy.sshd.disablepasswd
         - name: change ssh port
           template:
             src: sshd/00-altport.conf
diff --git a/playbooks/setup/server/files/sshd/00-nopasswd.conf b/roles/sshd/disablepasswd/files/00-nopasswd.conf
similarity index 100%
rename from playbooks/setup/server/files/sshd/00-nopasswd.conf
rename to roles/sshd/disablepasswd/files/00-nopasswd.conf
diff --git a/roles/sshd/disablepasswd/meta/main.yml b/roles/sshd/disablepasswd/meta/main.yml
new file mode 100644
index 0000000..9f28352
--- /dev/null
+++ b/roles/sshd/disablepasswd/meta/main.yml
@@ -0,0 +1,6 @@
+galaxy_info:
+  author: kevinnlsamuel
+  description: sayin hello
+dependencies:
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
diff --git a/roles/sshd/disablepasswd/tasks/main.yml b/roles/sshd/disablepasswd/tasks/main.yml
new file mode 100644
index 0000000..906f639
--- /dev/null
+++ b/roles/sshd/disablepasswd/tasks/main.yml
@@ -0,0 +1,4 @@
+- name: disable password auth
+  copy:
+    src: 00-nopasswd.conf
+    dest: /etc/ssh/ssh_config.d/00-nopasswd.conf