summaryrefslogtreecommitdiff
path: root/roles/sshserver/tasks/main.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/sshserver/tasks/main.yaml')
-rw-r--r--roles/sshserver/tasks/main.yaml12
1 files changed, 12 insertions, 0 deletions
diff --git a/roles/sshserver/tasks/main.yaml b/roles/sshserver/tasks/main.yaml
index d2c5c9f0..fd92f12d 100644
--- a/roles/sshserver/tasks/main.yaml
+++ b/roles/sshserver/tasks/main.yaml
@@ -25,3 +25,15 @@
regexp: "^AllowUsers"
line: "AllowUsers {{ ' '.join([ 'root' ] | union(sshserver_allowusers_group | default([])) | union(sshserver_allowusers_host | default([]))) }}"
notify: restart ssh
+
+- name: install ssh keys for root
+ authorized_key:
+ user: root
+ key: "{{ sshserver_root_keys }}"
+ exclusive: yes
+
+- name: delete root password
+ user:
+ name: root
+ password: "!"
+