diff --git a/roles/setup/tasks/main.yml b/roles/setup/tasks/main.yml
new file mode 100755
index 0000000..21e6d44
--- /dev/null
+++ b/roles/setup/tasks/main.yml
@@ -0,0 +1,5 @@
+- name: Setup
+  become: "{{ 'no' if inventory_hostname == 'nas.home.lan' else 'yes' }}"
+  block:
+    - name: Gather facts
+      ansible.builtin.setup:
diff --git a/roles/sshd_config/tasks/main.yml b/roles/sshd_config/tasks/main.yml
new file mode 100755
index 0000000..df24b02
--- /dev/null
+++ b/roles/sshd_config/tasks/main.yml
@@ -0,0 +1,14 @@
+- name: SSHD config Setup
+  become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}"
+  block:
+    - name: Reconfigure sshd
+      ansible.builtin.replace:
+        path: /etc/ssh/sshd_config
+        regexp: "^PermitRootLogin"
+        replace: "#PermitRootLogin"
+    - name: Restart ssh service
+      ansible.builtin.service:
+        name: ssh
+        state: restarted
+        daemon_reload: true
+        enabled: true
diff --git a/roles/sshd_config/vars/main.yml b/roles/sshd_config/vars/main.yml
new file mode 100755
index 0000000..a63bf71
--- /dev/null
+++ b/roles/sshd_config/vars/main.yml
@@ -0,0 +1 @@
+dest_folder: "/tmp/ans_repo"