10sr
/
dotfiles-mirror
mirror of https://github.com/10sr/dotfiles.git
1
0
Fork 0
Code Issues 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1477 Commits
1 Branch
36 MiB
 
 
 
 
 
 
Tree: 95de3a19d2
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '95de3a19d2'
${ noResults }
dotfiles-mirror/ansible/sshd_config.yml

54 lines
1.6 KiB
Raw Blame History 

  1. ---

  2. - hosts: all

  3.   vars:

  4.     conf: /etc/ssh/sshd_config

  5.   sudo: yes

  6.   tasks:

  7.   # - name: find sshd_config

  8.   #   set_fact: conf={{item}}

  9.   #   # how to check remote files?

  10.   #   with_first_found:

  11.   #   - /etc/ssh/sshd_config

  12.   #   - /etc/sshd_config

  13.   # - name: assert sshd_config found

  14.   #   assert: that="conf is defined"

  15.   - name: Protocol 2

  16.     lineinfile: dest={{conf}}

  17.                 regexp="^(#)?Protocol"

  18.                 line="Protocol 2"

  19.     notify: restart sshd

  20.   - name: PermitRootLogin no

  21.     lineinfile: dest={{conf}}

  22.                 regexp="^(#)?PermitRootLogin"

  23.                 line="PermitRootLogin no"

  24.     notify: restart sshd

  25.   - name: RSAAuthentication no

  26.     lineinfile: dest={{conf}}

  27.                 regexp="^(#)?RSAAuthentication"

  28.                 line="RSAAuthentication no"

  29.     notify: restart sshd

  30.   - name: PasswordAuthentication no

  31.     lineinfile: dest={{conf}}

  32.                 regexp="^(#)?PasswordAuthentication"

  33.                 line="PasswordAuthentication no"

  34.     notify: restart sshd

  35.   - name: PermitEmptyPassword no

  36.     lineinfile: dest={{conf}}

  37.                 regexp="^(#)?PermitEmptyPasswords"

  38.                 line="PermitEmptyPasswords no"

  39.     notify: restart sshd

  40.   - name: ChallengeResponseAuthentication no

  41.     lineinfile: dest={{conf}}

  42.                 regexp="^(#)?ChallengeResponseAuthentication"

  43.                 line="ChallengeResponseAuthentication no"

  44.     notify: restart sshd

  45.   - name: UseDNS no

  46.     lineinfile: dest={{conf}}

  47.                 regexp="^(#)?UseDNS"

  48.                 line="UseDNS no"

  49.     notify: restart sshd

  50. 

  51.   handlers:

  52.   - name: restart sshd

  53.     service: name=ssh state=restarted