diff --git a/tasks/ssh_default.yml b/tasks/ssh_default.yml
index a900068..44d126c 100644
--- a/tasks/ssh_default.yml
+++ b/tasks/ssh_default.yml
@@ -34,12 +34,12 @@
       loop: "{{ sshd_allow_groups }}"
 
     - name: Disable SSH server CRYPTO_POLICY
-      copy:
-        src: etc/sysconfig/sshd
+      template:
+        src: etc/sysconfig/sshd.j2
         dest: /etc/sysconfig/sshd
-        owner: "root"
-        group: "root"
-        mode: "0640"
+        owner: root
+        group: root
+        mode: 0640
       when:
         - sshd_disable_crypto_policy | bool
         - ('crypto-policies' in ansible_facts.packages)