---
- name: change ssh port to {{ alt_ssh_port | mandatory }}
  notify: restart sshd
  template:
    src: 00-altport.conf
    dest: /etc/ssh/sshd_config.d/00-altport.conf
- name: install semanage
  when: ansible_facts.selinux.status != 'disabled'
  dnf:
    state: present
    name: policycoreutils-python-utils
- name: give sshd access to alt port on selinux
  register: result_change_to_alt_port
  ignore_errors: true
  changed_when: "'already defined' not in result_change_to_alt_port.stdout"
  command: semanage port -a -t ssh_port_t -p tcp {{ alt_ssh_port }}