- name: copy firewall template
  become: true
  template:
    src: 'templates/nftables.j2'
    dest: '/etc/nftables.conf'
    owner: root
    group: root
    mode: '0644'
  notify: restart nftables

- name: copy ssh template
  become: true
  template:
    src: 'templates/ssh.j2'
    dest: '/etc/ssh/sshd_config'
    owner: root
    group: root
    mode: '0644'
  notify: reload ssh