---
- name: insert lines in /etc/pam.d/sshd
  blockinfile:
    path: /etc/pam.d/sshd
    block: |
      # two-factor authentication via Google Authenticator 
      auth required pam_google_authenticator.so no_increment_hotp nullok
  
- name: restart ssh
  service:
    name: ssh
    state: restarted