added ssh_conf. set HashKnownHosts to no to make known_hosts human readable and reviewable.

Also set GSSAPIAuthentication to no because it is not required.

roles/ssh/tasks/main.yml

@@ -3,6 +3,11 @@
     src: "{{ role_path }}/files/sshd_config"
     dest: /etc/ssh/sshd_config
   register: sshd_config
+- name: Copy ssh config
+  copy:
+    src: "{{ role_path }}/files/ssh_config"
+    dest: /etc/ssh/ssh_config
+  register: ssh_config
 - name: Restart SSH service
   systemd:
     enabled: true