ansible-sshd/examples/example-root-login.yml

---
- hosts: all
  tasks:
  - name: Configure sshd to prevent root and password login except from particular subnet
    include_role:
      name: ansible-sshd
    vars:
      sshd:
        # root login and password login is enabled only from a particular subnet
        PermitRootLogin: no
        PasswordAuthentication: no
        Match:
          - Condition: "Address 192.0.2.0/24"
            PermitRootLogin: yes
            PasswordAuthentication: yes
examples: Provide simple example playbook 2020-12-15 15:00:38 +01:00			`---`
			`- hosts: all`
			`tasks:`
			`- name: Configure sshd to prevent root and password login except from particular subnet`
			`include_role:`
			`name: ansible-sshd`
			`vars:`
			`sshd:`
			`# root login and password login is enabled only from a particular subnet`
			`PermitRootLogin: no`
			`PasswordAuthentication: no`
			`Match:`
Fix issues found by linters - enable all tests on all repos - remove suppressions Cleaning up yamllint errors. - Use .yamllint.yml and .yamllint_defaults.yml instead of .yamllint.yaml. - Fix the invalid indentations. Cleaning up ansible-lint errors. - Add "name" to every task. - Use command rather than shell - Add "changed_when: false". - Use '\|' instead of '>' for the shell module. - Fix '/bin/sh: line 3: CRYPTO_POLICY: unbound variable'. - Add "set -eu" and "set -o pipefail" if pipefail is available. Note: "pipefail" is not available in "sh" and "dash". - Add "- '306' # Shells that use pipes should set the pipefail option" to .ansible-lint since ansible-lint does not recognize it if it's set in "if set -o \| grep pipefail". RHELPLAN-73804 2021-04-07 20:12:03 +02:00			`- Condition: "Address 192.0.2.0/24"`
			`PermitRootLogin: yes`
			`PasswordAuthentication: yes`