improve bootstrap

handlers/main.yml

@@ -1,2 +1,5 @@
 ---
-# handlers file for ansible_bootstrap
+# handlers file for ansible_bootstrap
+
+  - name: restart ssh
+    service: name=sshd state=restarted

tasks/main.yml

@@ -1,8 +1,8 @@
 ---
 # tasks file for ansible_bootstrap
 
-- name: "install python"
+- name: "install python and archlinux-keyring"
-  raw: pacman -Sy python --noconfirm
+  raw: pacman -Sy python archlinux-keyring --noconfirm
 
 - name: sudoers install
   pacman:
@@ -56,4 +56,12 @@
       owner: "{{username}}" # not required. Name of the user that should own the file/directory, as would be fed to I(chown).
   with_items:
       - id_rsa
-      - authorized_keys
+      - authorized_keys
+
+- name: Remove root SSH access
+  lineinfile: 
+    dest: /etc/ssh/sshd_config 
+    regexp: "^PermitRootLogin" 
+    line: "PermitRootLogin no" 
+    state: present
+  notify: restart ssh