corrections

tasks/ssh_config.yml

@@ -50,8 +50,8 @@
 
         - name: Custom Modular Configuration
           template:
-            src: "etc/ssh/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-60-shootthej.conf.j2"
+            src: "etc/ssh/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-60-infra.conf.j2"
-            dest: "/etc/ssh/sshd_config.d/60-shootthej.conf"
+            dest: "/etc/ssh/sshd_config.d/60-infra.conf"
             owner: root
             group: root
             mode: '0600'

templates/etc/ssh/RedHat-9-60-infra.conf.j2

@@ -0,0 +1,19 @@
+################################################################################
+# Below managed by Shoot the J Ltd.
+#
+Banner /etc/banner
+PermitRootLogin no
+Port 22
+X11Forwarding no
+LoginGraceTime 1m
+
+# IPA
+AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
+AuthorizedKeysCommandUser nobody
+ChallengeResponseAuthentication yes
+
+# IPA Automatic
+PubkeyAuthentication yes
+KerberosAuthentication no
+GSSAPIAuthentication yes
+UsePAM yes

templates/etc/ssh/Rocky-9-60-infra.conf.j2

@@ -0,0 +1 @@
+RedHat-9-60-infra.conf.j2