--- # overrides of group_vars/all.yml # geerlingguy.security — DMZ host: no SSH password login, keys only security_ssh_password_authentication: "no"