expose sshd_config template backup option with sshd_backup

defaults/main.yml

@@ -7,6 +7,8 @@ sshd_skip_defaults: false
 sshd_manage_service: true
 # If the below is false, don't reload the ssh daemon on change
 sshd_allow_reload: true
+# If the below is true, create a backup of the config file when the template is copied
+sshd_backup: false
 # Empty dicts to avoid errors
 sshd: {}
 

tasks/main.yml

@@ -25,6 +25,7 @@
     owner: "{{ sshd_config_owner }}"
     group: "{{ sshd_config_group }}"
     mode: "{{ sshd_config_mode }}"
+    backup: "{{ sshd_backup }}"
     validate: "{{ sshd_binary }} -t -f %s"
   notify: reload_sshd