diff --git a/playbooks/setup/server/files/sshd/00-nopasswd.conf b/playbooks/setup/server/files/sshd/00-nopasswd.conf
new file mode 100644
index 0000000..b32dc2f
--- /dev/null
+++ b/playbooks/setup/server/files/sshd/00-nopasswd.conf
@@ -0,0 +1 @@
+PasswordAuthentication no
diff --git a/playbooks/setup/server/natsuco.yaml b/playbooks/setup/server/natsuco.yaml
new file mode 100644
index 0000000..acac7bb
--- /dev/null
+++ b/playbooks/setup/server/natsuco.yaml
@@ -0,0 +1,24 @@
+---
+- hosts:
+    - tmp.kevinnlsamuel.com
+  vars:
+    ansible_user: root
+  name: setup server natsuco
+  tasks:
+    - name: harden ssh
+      block:
+        - name: disable password auth
+          file:
+            src: sshd/00-nopasswd.conf
+            dest: /etc/ssh/ssh_config.d/00-altport.conf
+        - name: change ssh port
+          vars:
+            port: 1023
+          template:
+            src: sshd/00-altport.conf
+            dest: /etc/ssh/ssh_config.d/00-altport.conf
+    - name: install semanage
+      dnf:
+        state: present
+        name: policycoreutils-python-utils
+    - command: /usr/sbin/semanage port -a -t ssh_port_t -p tcp 1023
diff --git a/playbooks/setup/server/templates/sshd/00-altport.conf b/playbooks/setup/server/templates/sshd/00-altport.conf
new file mode 100644
index 0000000..de5b4ea
--- /dev/null
+++ b/playbooks/setup/server/templates/sshd/00-altport.conf
@@ -0,0 +1 @@
+Port {{ port }}