--- - name: Basic Setup hosts: ch-jump roles: - role: apt-repo/base - role: core/base - role: core/sshd/base - role: core/zsh - role: core/ntp - role: core/admin-users post_tasks: - name: blub blockinfile: marker: "# {mark} ansible jump-host specific config" block: | Match user blub PasswordAuthentication no insertafter: '^### ansible core/sshd config barrier ###' dest: /etc/ssh/sshd_config