infra/ansible-role-ssh
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updat templates to use ansible_managed

Browse source
This commit is contained in:
nd 2019-06-17 13:07:46 +01:00
parent 84d56caed2
commit 94313cc23e
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
3 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
templates/ssh_config.j2
View file

@ -1,3 +1,5 @@
# {{ ansible_managed }}
# Ensure KnownHosts are unreadable if leaked - it is otherwise easier to know which hosts your keys have access to. # Ensure KnownHosts are unreadable if leaked - it is otherwise easier to know which hosts your keys have access to.
HashKnownHosts yes HashKnownHosts yes
# Host keys the client accepts - order here is honored by OpenSSH # Host keys the client accepts - order here is honored by OpenSSH

2
templates/ssh_root_authorized_keys.j2
View file

@ -1,4 +1,4 @@
### AUTOGENERATED do not edit! edit /inventory/group_vars/all.yml in ansible ### # {{ ansible_managed }}
{% for name, keys in admin_ssh_keys.items() %} {% for name, keys in admin_ssh_keys.items() %}
#{{ name }} #{{ name }}

5
templates/ssh_sshd_config.j2
View file

@ -1,4 +1,4 @@
# Package generated configuration file # {{ ansible_managed }}
# See the sshd_config(5) manpage for details # See the sshd_config(5) manpage for details
# What ports, IPs and protocols we listen for # What ports, IPs and protocols we listen for
@ -49,9 +49,6 @@ Subsystem sftp internal-sftp
UsePam yes # needed to create home dirs with an ldap login UsePam yes # needed to create home dirs with an ldap login
AuthorizedKeysCommand /etc/ssh/ldap_sshpubkey.sh
AuthorizedKeysCommandUser sshd
AuthorizedKeysFile /root/.ssh/authorized_keys AuthorizedKeysFile /root/.ssh/authorized_keys
MaxAuthTries 10 MaxAuthTries 10