---
- name: Ensure SSH server installed
  apt:
    name: openssh-server
    state: present

- name: Configure firewalls - allow SSH port
  ufw:
    rule: allow
    port: '22'
    proto: tcp

- name: Configure firewalls - allow SSH by name (backup)
  ufw:
    rule: allow
    name: OpenSSH
  ignore_errors: true

- name: Enable UFW with deny default policy
  ufw:
    state: enabled
    policy: deny