Merge pull request #17 from danielkubat/ssh

Ensure SSH daemon is enabled
This commit is contained in:
Louis Abel 2020-12-11 17:40:54 -07:00 committed by GitHub
commit 1f20af2331
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 10 deletions

View File

@ -1,5 +1,5 @@
---
- name: restart_ssh
- name: restart_sshd
service:
name: sshd
state: restarted

View File

@ -1,37 +1,42 @@
---
- name: Ensure SSH is installed - it should be
- name: Ensure SSH server is installed
package:
name: openssh-server
state: present
- name: Ensure SSH daemon is enabled
service:
name: sshd
enabled: true
# TODO: Prepare for /etc/ssh/sshd_config.d/* style of configuration
- name: ssh configuration - global
- name: SSH daemon configuration - global
block:
- name: ssh configuration - base
- name: SSH daemon configuration - base
template:
src: "etc/ssh/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-sshd_config.j2"
dest: /etc/ssh/sshd_config
dest: "/etc/ssh/sshd_config"
owner: root
group: root
mode: '0600'
validate: /usr/sbin/sshd -t -f %s
backup: true
notify: restart_ssh
notify: restart_sshd
rescue:
- name: Print errors for configuration and validation
debug:
msg: "Error in configuration or template"
msg: "Error in SSH daemon configuration or template"
- name: ssh banner
- name: SSH banner
copy:
src: "etc/rockybanner"
dest: "/etc/rockybanner"
owner: root
group: root
mode: '0644'
notify: restart_ssh
notify: restart_sshd
- name: Remove dsa keys
- name: Remove DSA keys
file:
path: "{{ item }}"
state: absent