add role ssh-keepalive, which uses  keepalive packets to prevent firewalls closing inactive ssh connections