---
- name: Ensure SSH server installed
  apt:
    name: openssh-server
    state: present

- name: Configure firewalls
  ufw:
    rule: allow
    name: OpenSSH

- name: Enable UFW with deny default policy
  ufw:
    state: enabled
    policy: deny