瀏覽代碼

Remove sshd_config.yml

master
10sr 5 年之前
父節點
當前提交
f4be32b20e
簽署人: 10sr GPG 金鑰 ID: 7BEC428194130EB2
共有 1 個檔案被更改,包括 0 行新增58 行删除
  1. +0
    -58
      ansible/sshd_config.yml

+ 0
- 58
ansible/sshd_config.yml 查看文件

@@ -1,58 +0,0 @@
---
- hosts: all
vars:
conf: /etc/ssh/sshd_config
sudo: yes
tasks:
# - name: find sshd_config
# set_fact: conf={{item}}
# # how to check remote files?
# with_first_found:
# - /etc/ssh/sshd_config
# - /etc/sshd_config
# - name: assert sshd_config found
# assert: that="conf is defined"
- name: Protocol 2
lineinfile: dest={{conf}}
regexp="^(#)?Protocol"
line="Protocol 2"
notify: restart sshd
- name: PermitRootLogin no
lineinfile: dest={{conf}}
regexp="^(#)?PermitRootLogin"
line="PermitRootLogin no"
notify: restart sshd
- name: RSAAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?RSAAuthentication"
line="RSAAuthentication no"
notify: restart sshd
- name: PasswordAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?PasswordAuthentication"
line="PasswordAuthentication no"
notify: restart sshd
- name: PermitEmptyPassword no
lineinfile: dest={{conf}}
regexp="^(#)?PermitEmptyPasswords"
line="PermitEmptyPasswords no"
notify: restart sshd
- name: ChallengeResponseAuthentication no
lineinfile: dest={{conf}}
regexp="^(#)?ChallengeResponseAuthentication"
line="ChallengeResponseAuthentication no"
notify: restart sshd
- name: UseDNS no
lineinfile: dest={{conf}}
regexp="^(#)?UseDNS"
line="UseDNS no"
notify: restart sshd
- name: UsePAM no
lineinfile: dest={{conf}}
regexp="^(#)?UsePAM"
line="UsePAM no"
notify: restart sshd

handlers:
- name: restart sshd
service: name=ssh state=restarted

Loading…
取消
儲存