mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 11:42:08 +00:00
61 lines
1.4 KiB
YAML
61 lines
1.4 KiB
YAML
- name: "Install ssh daemon using package: {{ sshd_package }}"
|
|
package:
|
|
name: "{{ sshd_package }}"
|
|
state: present
|
|
|
|
- name: Disable password-based logins to root
|
|
lineinfile:
|
|
dest: /etc/ssh/sshd_config
|
|
regexp: '^PermitRootLogin'
|
|
line: 'PermitRootLogin without-password'
|
|
state: present
|
|
#when: sshd_enabled | bool
|
|
#TODO: use handler to reload ssh
|
|
|
|
- name: mkdir /root/.ssh
|
|
file:
|
|
state: directory
|
|
path: /root/.ssh
|
|
owner: root
|
|
group: root
|
|
mode: '0700'
|
|
#when: sshd_enabled | bool
|
|
|
|
- name: Install dummy root keys as placeholder
|
|
copy:
|
|
src: dummy_authorized_keys
|
|
dest: /root/.ssh/authorized_keys
|
|
owner: root
|
|
group: root
|
|
mode: '0600'
|
|
force: no
|
|
#when: sshd_enabled | bool
|
|
|
|
|
|
# RECORD sshd AS INSTALLED
|
|
|
|
- name: "Set 'sshd_installed: True'"
|
|
set_fact:
|
|
sshd_installed: True
|
|
|
|
- name: "Add 'sshd_installed: True' to {{ iiab_state_file }}"
|
|
lineinfile:
|
|
path: "{{ iiab_state_file }}" # /etc/iiab/iiab_state.yml
|
|
regexp: '^sshd_installed'
|
|
line: 'sshd_installed: True'
|
|
|
|
|
|
- name: Enable & Start ssh daemon ({{ sshd_service }}) if sshd_enabled
|
|
systemd:
|
|
name: "{{ sshd_service }}"
|
|
daemon_reload: yes
|
|
enabled: yes
|
|
state: started
|
|
when: sshd_enabled | bool
|
|
|
|
- name: Disable & Stop ssh daemon ({{ sshd_service }}) if not sshd_enabled
|
|
systemd:
|
|
name: "{{ sshd_service }}"
|
|
enabled: no
|
|
state: stopped
|
|
when: not sshd_enabled
|