Merge pull request #17 from danielkubat/ssh

Ensure SSH daemon is enabled
This commit is contained in:
Louis Abel 2020-12-11 17:40:54 -07:00 committed by GitHub
commit 1f20af2331
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 10 deletions

View File

@ -1,5 +1,5 @@
--- ---
- name: restart_ssh - name: restart_sshd
service: service:
name: sshd name: sshd
state: restarted state: restarted

View File

@ -1,37 +1,42 @@
--- ---
- name: Ensure SSH is installed - it should be - name: Ensure SSH server is installed
package: package:
name: openssh-server name: openssh-server
state: present state: present
- name: Ensure SSH daemon is enabled
service:
name: sshd
enabled: true
# TODO: Prepare for /etc/ssh/sshd_config.d/* style of configuration # TODO: Prepare for /etc/ssh/sshd_config.d/* style of configuration
- name: ssh configuration - global - name: SSH daemon configuration - global
block: block:
- name: ssh configuration - base - name: SSH daemon configuration - base
template: template:
src: "etc/ssh/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-sshd_config.j2" src: "etc/ssh/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-sshd_config.j2"
dest: /etc/ssh/sshd_config dest: "/etc/ssh/sshd_config"
owner: root owner: root
group: root group: root
mode: '0600' mode: '0600'
validate: /usr/sbin/sshd -t -f %s validate: /usr/sbin/sshd -t -f %s
backup: true backup: true
notify: restart_ssh notify: restart_sshd
rescue: rescue:
- name: Print errors for configuration and validation - name: Print errors for configuration and validation
debug: debug:
msg: "Error in configuration or template" msg: "Error in SSH daemon configuration or template"
- name: ssh banner - name: SSH banner
copy: copy:
src: "etc/rockybanner" src: "etc/rockybanner"
dest: "/etc/rockybanner" dest: "/etc/rockybanner"
owner: root owner: root
group: root group: root
mode: '0644' mode: '0644'
notify: restart_ssh notify: restart_sshd
- name: Remove dsa keys - name: Remove DSA keys
file: file:
path: "{{ item }}" path: "{{ item }}"
state: absent state: absent