Move the configuration file owner/group variables to defaults.

defaults/main.yml

@@ -85,6 +85,10 @@ ssh_google_auth: false # sshd
 # false to disable pam device 2FA input
 ssh_pam_device: false # sshd
 
+# user and group that owns SSH configuration files
+ssh_owner: root
+ssh_group: root
+
 # true if SSH support GSSAPI
 ssh_gssapi: true
 

vars/Debian.yml

@@ -1,3 +1 @@
 sshd_service_name: ssh
-ssh_owner: root
-ssh_group: root

vars/FreeBSD.yml

@@ -1,3 +1,2 @@
 sshd_service_name: sshd
-ssh_owner: root
 ssh_group: wheel

vars/OpenBSD.yml

@@ -1,5 +1,4 @@
 sshd_service_name: sshd
-ssh_owner: root
 ssh_group: wheel
 
 ssh_gssapi: false

vars/Oracle Linux.yml

@@ -1,3 +1 @@
 sshd_service_name: sshd
-ssh_owner: root
-ssh_group: root

vars/RedHat.yml

@@ -1,3 +1 @@
 sshd_service_name: sshd
-ssh_owner: root
-ssh_group: root