biiiiig update !

templates/needrestart_exclude.j2

@@ -0,0 +1,5 @@
+$nrconf{override_rc} = {
+{% for item in needrestart_exclude %}
+    '{{ item }}' => 0,
+{% endfor %}
+};

templates/root_authorized_keys.j2

@@ -0,0 +1,5 @@
+{% if ssh_root_authorized_keys is defined %}
+{% for key in ssh_root_authorized_keys %}
+{{ key }}
+{% endfor %}
+{% endif %}

templates/sshd_root_conf.j2

@@ -0,0 +1,8 @@
+PermitRootLogin no
+
+{% if ssh_root_authorized_ips is defined %}
+{% for ip in ssh_root_authorized_ips %}
+Match Address {{ ip }}
+  PermitRootLogin prohibit-password
+{% endfor %}
+{% endif %}