crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge branch 'openssh' into 'newinfra' 

Openssh

See merge request nounous/ansible!58
certbot_on_virtu
_benjamin 2020-08-19 14:05:46 +02:00
parent e7b5f7e612 94ae57f24e
commit 2527390703
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
plays/root.yml
View File

@ -46,3 +46,7 @@
roles: roles:
- ldap-client - ldap-client
- home-nounous - home-nounous
- hosts: server
roles:
- openssh

4
roles/openssh/tasks/main.yml
View File

@ -2,8 +2,8 @@
- name: Filter SSH on groups - name: Filter SSH on groups
lineinfile: lineinfile:
dest: /etc/ssh/sshd_config dest: /etc/ssh/sshd_config
regexp: ^AllowGroups regexp: ^#?PermitRootLogin
line: "AllowGroups {{ ssh_allow_groups }}" line: "PermitRootLogin yes"
state: present state: present
notify: Restart sshd service notify: Restart sshd service