Browse Source

ansible: add sshd_config.yml

pull/1/head
10sr 10 years ago
parent
commit
ecca55a1d5
1 changed files with 45 additions and 0 deletions
  1. +45
    -0
      ansible/sshd_config.yml

+ 45
- 0
ansible/sshd_config.yml View File

@@ -0,0 +1,45 @@
---
- hosts: all
vars:
conf: /etc/ssh/sshd_config
sudo: yes
tasks:
- name: Protocol 2
lineinfile: dest={{conf}}
regexp="^(#)?Protocol"
line="Protocol 2"
notify: restart sshd
- name: PermitRootLogin no
lineinfile: dest={{conf}}
regexp="^(#)?PermitRootLogin"
line="PermitRootLogin no"
notify: restart sshd
- name: RSAAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?RSAAuthentication"
line="RSAAuthentication no"
notify: restart sshd
- name: PasswordAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?PasswordAuthentication"
line="PasswordAuthentication no"
notify: restart sshd
- name: PermitEmptyPassword no
lineinfile: dest={{conf}}
regexp="^(#)?PermitEmptyPasswords"
line="PermitEmptyPasswords no"
notify: restart sshd
- name: ChallengeResponseAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?ChallengeResponseAuthentication"
line="ChallengeResponseAuthentication no"
notify: restart sshd
- name: UseDNS no
lineinfile: dest={{conf}}
regexp="^(#)?UseDNS"
line="UseDNS no"
notify: restart sshd

handlers:
- name: restart sshd
service: name=ssh state=restarted

Loading…
Cancel
Save