libretic/ansible-sshd
6
0
Fork 0
mirror of https://github.com/willshersystems/ansible-sshd synced 2024-11-26 13:00:18 +01:00
Code Issues Projects Releases Packages Wiki Activity

Move defaults to vars/main.yml

Browse source
This commit is contained in:
Jakub Jelen 2021-06-02 14:21:40 +02:00 committed by Jakub Jelen
parent eaa6f92a29
commit 00ad695691
2 changed files with 14 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
defaults/main.yml
View file

@ -43,15 +43,15 @@ sshd: {}
# The path to sshd_config file. This is useful when creating an included # The path to sshd_config file. This is useful when creating an included
# configuration file snippet or configuring second sshd service # configuration file snippet or configuring second sshd service
sshd_config_file: "{{ __sshd_config_file | default('/etc/ssh/sshd_config') }}" sshd_config_file: "{{ __sshd_config_file }}"
### VARS DEFAULTS ### VARS DEFAULTS
### The following are defaults for OS specific configuration in var files in ### The following are defaults for OS specific configuration in var files in
### this role. They should not be set directly by role users. ### this role. They should not be set directly by role users.
sshd_packages: [] sshd_packages: []
sshd_config_owner: "{{ __sshd_config_owner | default('root') }}" sshd_config_owner: "{{ __sshd_config_owner }}"
sshd_config_group: "{{ __sshd_config_group | default('root') }}" sshd_config_group: "{{ __sshd_config_group }}"
sshd_config_mode: "{{ __sshd_config_mode | default('0600') }}" sshd_config_mode: "{{ __sshd_config_mode }}"
sshd_binary: /usr/sbin/sshd sshd_binary: /usr/sbin/sshd
sshd_service: sshd sshd_service: sshd
sshd_sftp_server: /usr/lib/openssh/sftp-server sshd_sftp_server: /usr/lib/openssh/sftp-server
@ -61,9 +61,9 @@ sshd_sftp_server: /usr/lib/openssh/sftp-server
# configuration or restarting), we make sure the keys exist and have correct # configuration or restarting), we make sure the keys exist and have correct
# permissions. To disable this check, set sshd_verify_hostkeys to false # permissions. To disable this check, set sshd_verify_hostkeys to false
sshd_verify_hostkeys: "auto" sshd_verify_hostkeys: "auto"
sshd_hostkey_owner: "{{ __sshd_hostkey_owner | default('root') }}" sshd_hostkey_owner: "{{ __sshd_hostkey_owner }}"
sshd_hostkey_group: "{{ __sshd_hostkey_group | default('root') }}" sshd_hostkey_group: "{{ __sshd_hostkey_group }}"
sshd_hostkey_mode: "{{ __sshd_hostkey_mode | default('0600') }}" sshd_hostkey_mode: "{{ __sshd_hostkey_mode }}"
# instead of replacing the whole configuration file, just append a specified # instead of replacing the whole configuration file, just append a specified
# snippet # snippet

7
vars/main.yml Normal file
View file

@ -0,0 +1,7 @@
__sshd_config_file: "/etc/ssh/sshd_config"
__sshd_config_owner: "root"
__sshd_config_group: "root"
__sshd_config_mode: "0600"
__sshd_hostkey_owner: "root"
__sshd_hostkey_group: "root"
__sshd_hostkey_mode: "0600"