39 lines
1.1 KiB
YAML
39 lines
1.1 KiB
YAML
---
|
|
|
|
- name: Configure ssh-server daemon
|
|
ansible.builtin.copy:
|
|
src: "{{ role_path }}/files/hardened_sshd.conf"
|
|
dest: /etc/ssh/sshd_config.d/hardened_sshd.conf
|
|
mode: u=rw,g=r,o=r
|
|
when: ansible_facts['distribution'] == 'Ubuntu'
|
|
notify: Restart ssh-server Ubuntu
|
|
|
|
- name: Configure ssh-server daemon
|
|
ansible.builtin.copy:
|
|
src: "{{ role_path }}/files/hardened_sshd.conf"
|
|
dest: /etc/ssh/sshd_config.d/hardened_sshd.conf
|
|
mode: u=rw,g=r,o=r
|
|
when: ansible_facts['distribution'] == 'Debian'
|
|
notify: Restart ssh-server Debian
|
|
|
|
- name: Configure ssh client
|
|
remote_user: ansible
|
|
ansible.builtin.copy:
|
|
src: "{{ role_path }}/files/hardened_ssh.conf"
|
|
dest: /etc/ssh/ssh_config.d/hardened_ssh.conf
|
|
mode: u=rw,g=r,o=r
|
|
|
|
#- name: Restart ssh-server Debian
|
|
# remote_user: ansible
|
|
# ansible.builtin.service:
|
|
# name: sshd
|
|
# state: restarted
|
|
# when: ansible_facts['distribution'] == 'Debian'
|
|
#
|
|
#- name: Restart ssh-server Ubuntu
|
|
# remote_user: ansible
|
|
# ansible.builtin.service:
|
|
# name: ssh
|
|
# state: restarted
|
|
# when: ansible_facts['distribution'] == 'Ubuntu'
|