- name: "Disable Challenge Response"
  lineinfile:
  args:
    dest: /etc/ssh/sshd_config
    regexp: "ChallengeResponseAuthentication yes"
    line: "ChallengeResponseAuthentication no"
    backrefs: yes
  become: true
  notify:
  - restart sshd
  - restart ssh

- name: "Disable Password"
  lineinfile:
  args:
    dest: /etc/ssh/sshd_config
    regexp: "PasswordAuthentication yes"
    line: "PasswordAuthentication no"
    backrefs: yes
  become: true
  notify:
  - restart sshd
  - restart ssh