Well, first push

roles/service_start/tasks/main.yml

@@ -0,0 +1,4 @@
+---
+# tasks file for service_start
+- name: SSH server
+  ansible.builtin.include_tasks: ssh_server.yml

roles/service_start/tasks/ssh_server.yml

@@ -0,0 +1,18 @@
+---
+- name: replace line
+  become: true
+  lineinfile: 
+    path: /etc/ssh/sshd_config
+    regexp: '^(.*)#PasswordAuthentication yes(.*)$' 
+    line: 'PasswordAuthentication no'
+    backrefs: yes
+
+
+- name: Start and enable sshd
+  become: true
+  ansible.builtin.service:
+    name: sshd
+    state: started
+    enabled: true
+  when: host != 'ntb'
+