if include does not supported, it is an older sshd-version. unsupported ciphers/kex/macs could be set, so leave defaults.

tasks/sshd_config.yml

@@ -45,9 +45,9 @@
       KerberosAuthentication: '{{sshd_kerberos_authentication}}'
       GSSAPIAuthentication:   '{{sshd_gssapi_authentication}}'
       TCPKeepAlive:           'yes'
-      Ciphers:                '{{sshd_ciphers}}'
-      MACs:                   '{{sshd_macs}}'
-      KexAlgorithms:          '{{sshd_kex_algorithms}}'
+      #Ciphers:                '{{sshd_ciphers}}'
+      #MACs:                   '{{sshd_macs}}'
+      #KexAlgorithms:          '{{sshd_kex_algorithms}}'
   - name: sshd_config
     lineinfile:
       path:        /etc/ssh/sshd_config