---
- name: Playbook to deny ssh for plesk servers that do not have shell users
  hosts: all
  gather_facts: false
  vars:
    notify_zulip:
    enabled: true
    stream: "operations"
    topic: "RM10136 close SSH by default"
  tasks:
    - name: Get server info
      plesk_info:
      register: plsk
    - name: On plesk server run the script
      when: plsk.plesk_found
      block:
        - name: Upload the script
          ansible.builtin.copy:
            src: RM10136_firewall_ssh_deny.sh
            dest: /tmp/RM10136_firewall_ssh_deny.sh
            mode: '0755'
          changed_when: false
        - name: Execute the script
          ansible.builtin.command: /tmp/RM10136_firewall_ssh_deny.sh
          register: script_result
          ignore_errors: true
          changed_when: "'Blocking SSH' in script_result.stdout"
          failed_when: false
        - name: Display errors
          ansible.builtin.debug:
            msg: "{{ script_result.stderr_lines }}"
          when: script_result.stderr is defined and script_result.stderr != ""
        - name: Remove the script
          ansible.builtin.command: rm -f /tmp/RM10136_firewall_ssh_deny.sh
          changed_when: false
          failed_when: false