Przeglądaj źródła

Remove sshd_config.yml

master
10sr 5 lat temu
rodzic
commit
f4be32b20e
Podpisane przez: 10sr ID klucza GPG: 7BEC428194130EB2
1 zmienionych plików z 0 dodań i 58 usunięć
  1. +0
    -58
      ansible/sshd_config.yml

+ 0
- 58
ansible/sshd_config.yml Wyświetl plik

@@ -1,58 +0,0 @@
---
- hosts: all
vars:
conf: /etc/ssh/sshd_config
sudo: yes
tasks:
# - name: find sshd_config
# set_fact: conf={{item}}
# # how to check remote files?
# with_first_found:
# - /etc/ssh/sshd_config
# - /etc/sshd_config
# - name: assert sshd_config found
# assert: that="conf is defined"
- name: Protocol 2
lineinfile: dest={{conf}}
regexp="^(#)?Protocol"
line="Protocol 2"
notify: restart sshd
- name: PermitRootLogin no
lineinfile: dest={{conf}}
regexp="^(#)?PermitRootLogin"
line="PermitRootLogin no"
notify: restart sshd
- name: RSAAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?RSAAuthentication"
line="RSAAuthentication no"
notify: restart sshd
- name: PasswordAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?PasswordAuthentication"
line="PasswordAuthentication no"
notify: restart sshd
- name: PermitEmptyPassword no
lineinfile: dest={{conf}}
regexp="^(#)?PermitEmptyPasswords"
line="PermitEmptyPasswords no"
notify: restart sshd
- name: ChallengeResponseAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?ChallengeResponseAuthentication"
line="ChallengeResponseAuthentication no"
notify: restart sshd
- name: UseDNS no
lineinfile: dest={{conf}}
regexp="^(#)?UseDNS"
line="UseDNS no"
notify: restart sshd
- name: UsePAM no
lineinfile: dest={{conf}}
regexp="^(#)?UsePAM"
line="UsePAM no"
notify: restart sshd

handlers:
- name: restart sshd
service: name=ssh state=restarted

Ładowanie…
Anuluj
Zapisz