summaryrefslogtreecommitdiff
path: root/roles/sshserver
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2018-12-09 14:03:05 +0100
committerChristian Pointner <equinox@spreadspace.org>2018-12-09 14:03:05 +0100
commita02e756446b9b23beba6dcaa60845d1fa70488cb (patch)
tree3bade44762e3f85b4795b659a6c44ac363e92783 /roles/sshserver
parentrefactoring sshserver role (diff)
renamed sshserver role to sshd
Diffstat (limited to 'roles/sshserver')
-rw-r--r--roles/sshserver/handlers/main.yml5
-rw-r--r--roles/sshserver/tasks/main.yml40
2 files changed, 0 insertions, 45 deletions
diff --git a/roles/sshserver/handlers/main.yml b/roles/sshserver/handlers/main.yml
deleted file mode 100644
index 822887e3..00000000
--- a/roles/sshserver/handlers/main.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-- name: restart ssh
- service:
- name: ssh
- state: restarted
diff --git a/roles/sshserver/tasks/main.yml b/roles/sshserver/tasks/main.yml
deleted file mode 100644
index e638905b..00000000
--- a/roles/sshserver/tasks/main.yml
+++ /dev/null
@@ -1,40 +0,0 @@
----
-- name: install ssh-server
- apt:
- name: openssh-server
- state: present
-
-- name: hardening ssh-server config
- lineinfile:
- regexp: "^#?\\s*{{ item.key }}"
- line: "{{ item.key }} {{ item.value }}"
- dest: /etc/ssh/sshd_config
- mode: 0644
- with_dict:
- IgnoreRhosts: "yes"
- PermitRootLogin: "without-password"
- PubkeyAuthentication: "yes"
- HostbasedAuthentication: "no"
- PermitEmptyPasswords: "no"
- UseDNS: "no"
- loop_control:
- label: "{{ item.key }}"
- notify: restart ssh
-
-- name: limit allowed users
- lineinfile:
- dest: /etc/ssh/sshd_config
- regexp: "^AllowUsers"
- line: "AllowUsers {{ ' '.join([ 'root' ] | union(ssh_allowusers_group | default([])) | union(ssh_allowusers_host | default([]))) }}"
- notify: restart ssh
-
-- name: install ssh keys for root
- authorized_key:
- user: root
- key: "{{ ssh_keys_root | join('\n') }}"
- exclusive: yes
-
-- name: delete root password
- user:
- name: root
- password: "!"