diff --git a/.gitignore b/.gitignore
index 3b2275f..55a6d06 100644
--- a/.gitignore
+++ b/.gitignore
@@ -158,3 +158,5 @@ SOURCES/vpn-1.5.3.tar.gz
 /kdump-1.3.1.tar.gz
 /community-general-7.1.0.tar.gz
 /storage-1.12.0.tar.gz
+/firewall-1.4.5.tar.gz
+/ssh-1.2.0.tar.gz
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8d9b76c..d301a5e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,17 @@
 Changelog
 =========
 
+[1.22.0-0.13] - 2023-06-23
+----------------------------
+
+### New Features
+
+- [ssh - add ssh_backup option with default true](https://bugzilla.redhat.com/show_bug.cgi?id=2216759)
+
+### Bug Fixes
+
+- [firewall - Don't install python(3)-firewall it's a dependency of firewalld](https://bugzilla.redhat.com/show_bug.cgi?id=2216521)
+
 [1.22.0-0.12] - 2023-06-22
 ----------------------------
 
diff --git a/rhel-system-roles.spec b/rhel-system-roles.spec
index 591709f..c08c80a 100644
--- a/rhel-system-roles.spec
+++ b/rhel-system-roles.spec
@@ -27,7 +27,7 @@ Name: linux-system-roles
 Url: https://github.com/linux-system-roles
 Summary: Set of interfaces for unified system management
 Version: 1.22.0
-Release: 0.12%{?dist}
+Release: 0.13%{?dist}
 
 License: GPLv3+ and MIT and BSD and Python
 %global _pkglicensedir %{_licensedir}/%{name}
@@ -138,7 +138,7 @@ Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar
 %deftag 15 v0.19.0
 
 %global rolename16 ssh
-%deftag 16 1.1.16
+%deftag 16 1.2.0
 
 %global rolename17 ha_cluster
 %deftag 17 1.9.3
@@ -147,7 +147,7 @@ Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar
 %deftag 18 1.5.7
 
 %global rolename19 firewall
-%deftag 19 1.4.4
+%deftag 19 1.4.5
 
 %global rolename20 cockpit
 %deftag 20 1.4.6
@@ -654,6 +654,10 @@ find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \
 %endif
 
 %changelog
+* Fri Jun 23 2023 Your Name <email@redhat.com> - 1.22.0-0.13
+- Resolves:rhbz#2216759 : ssh - add ssh_backup option with default true
+- Resolves:rhbz#2216521 : firewall - Don't install python(3)-firewall it's a dependency of firewalld
+
 * Thu Jun 22 2023 Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.12
 - Resolves:rhbz#2168738 : storage - Storage: mounted devices that are in use cannot be resized
 
diff --git a/sources b/sources
index de4bc54..ad745ad 100644
--- a/sources
+++ b/sources
@@ -7,7 +7,7 @@ SHA512 (cockpit-1.4.6.tar.gz) = 43163e01633c381bbae2897d0e39381de6574eb5605550f1
 SHA512 (community-general-7.1.0.tar.gz) = e42120208ff4ff8b9d82930fafbe0e2a7ff08ca35122903050ad5363840a7fa561e9003c711a3a324f5294778c863ba140ca7a77d9c4ce95977665abdfc73b81
 SHA512 (containers-podman-1.10.2.tar.gz) = b18122f4d5b2e68b6b6edfbb264a7ff98ce898db2bbf1f87e0d449f3dd7035d55d4bfcaed831159c2a0e7dcc61856ef38e22a553bb65ede4aced1830709b783e
 SHA512 (crypto_policies-1.2.10.tar.gz) = b494632cd15a5929b85ab509f2fce2887b4f8d821f868e2553b9a67ff09e5103bc976304dee04b6da63b73def6177174a47d5f4dffd49b4ded594ce2df05a337
-SHA512 (firewall-1.4.4.tar.gz) = 19a04369298e80accfaa57e9ca5c2c34b53e05ea78a1cecac46548d6440e54e19f0978742e5852aaf4516de4ccdfa22bb547f6623f05888cdef22df99155cab9
+SHA512 (firewall-1.4.5.tar.gz) = 7210108bb76b4d4e190d1e4fe1f37cc8570fc27626b8fe17ac0add49fcd55e0742ce228e0963dd4217d38b7b4edc38f6ea3cfa89b664f65ab53b20c9bbd0ec85
 SHA512 (ha_cluster-1.9.3.tar.gz) = 478fc854de7db1b3069af7f939b4ccf1d8404639d400c30972192f4d2cd9dd83371ba7423651b6615c95d1af9dcfaf641564fc85afcfa2a058f4fc0bb74bcca0
 SHA512 (journald-1.0.4.tar.gz) = 6efb7e24c2b38632e847e7e04c7135b4c8bcfd96dfb8dae5f6289001e19d82465c5d0c4c7479175d814dc94dd025323590cac0eea6ff5658ace69536dd211281
 SHA512 (kdump-1.3.1.tar.gz) = 07cdc86087ea2b26e9aa1558694fe2d2d5ff20d4f574acdaa205f50e0a757a7568efe04d75db44ec124ba1a736c2a1dfcb1a44f4296d8e7fdc2e8a596aa12572
@@ -22,7 +22,7 @@ SHA512 (postfix-1.3.7.tar.gz) = 61153bf1e66b8e486a2356104d3c166ffa577be8e4cb57a8
 SHA512 (postgresql-1.0.4.tar.gz) = 84afd59d6460094e9ff9860b342cadc3f237c21091d583c61e15162e251286cae8592b078125a38ba05fceded6dfe44c81568e5fed54f0c463b3312fb24967a8
 SHA512 (rhc-1.2.1.tar.gz) = 1ac6a156b42e5e6cbfc42a4f458815e165701a20e1068b51c038774528b4ee2fef204272470ea969fd37e253ac6a15b63c9cc59a36c1326ff7a3e22974db426e
 SHA512 (selinux-1.6.0.tar.gz) = 2db14a17b95100c86a1411f1ee2600c7ca40e52f45914dc0a4a6c5b0d4bc4e47f2e202154c76b26ccf57004d1bf01e4cecfc345a2e03a3cfd374e1e253633b30
-SHA512 (ssh-1.1.16.tar.gz) = bb947bb8ec2bd07864598588e9b6a032a222f3564f0960439ade8b7284efaedfb7ea6e7931fb9fbc67dc54865391a69a94c95beaa645b9f5f750971108ca49d2
+SHA512 (ssh-1.2.0.tar.gz) = 11b0afa27095feda775cf2db1abfc068ef3a87a1f322e4bb91bc4a35bde87fc5ad877198bb2e3a7880c93ba9acad53a97fac23cd27db32b9706ca81f3ae9c430
 SHA512 (storage-1.12.0.tar.gz) = c1849c45e6d999381e85ffe0b7e7f19afe7f7c981cfc7844a9b04403c7b1ffe697cd852ed0038d2fd50736324104393af71eb8df12e679300b4077b8c057b5b3
 SHA512 (timesync-1.7.5.tar.gz) = 6a7ff71a6152e74706836ec32671f1d1dff46b675816e584aa2761acbb88874f6e62d892a74555c3534ba7851a114bef30a18f79620ec707d0829c46c3ce8a33
 SHA512 (tlog-1.2.15.tar.gz) = 1ba847c96c58d6c82e6a6bc18f95af0f6749f7b9bb3cdfbeb19175ceef5135f8cdf5db796a6a2f8b09c712514674fe10d0d4c85c8b670d123f88723a6bf193ca