mirror of
https://github.com/roles-ansible/ansible_role_sshd.git
synced 2024-08-16 11:59:49 +02:00
44 lines
1 KiB
YAML
44 lines
1 KiB
YAML
|
---
|
||
|
|
- name: Generate new ssh host key pair if necessary
|
||
|
|
become: yes
|
||
|
|
command: ssh-keygen -t ecdsa -f 'ssh_host_{{ item }}_key' -P '' -q
|
||
|
|
args:
|
||
|
|
chdir: '/etc/ssh/'
|
||
|
|
creates: 'ssh_host_{{ item }}_key.pub'
|
||
|
|
notify:
|
||
|
|
- systemctl restart ssh
|
||
|
|
with_items: "{{ sshd__key_types }}"
|
||
|
|
when:
|
||
|
|
- sshd__manage_key_types | bool
|
||
|
|
|
||
|
|
- name: Remove unwanted host keys
|
||
|
|
become: yes
|
||
|
|
file:
|
||
|
|
path: '/etc/ssh/ssh_host_{{ item }}_key'
|
||
|
|
state: absent
|
||
|
|
with_items:
|
||
|
|
- rsa
|
||
|
|
- dsa
|
||
|
|
notify:
|
||
|
|
- systemctl restart ssh
|
||
|
|
|
||
|
|
- name: make sure the correct keys are available
|
||
|
|
file:
|
||
|
|
path: '/etc/ssh/ssh_host_{{ item }}_key'
|
||
|
|
state: absent
|
||
|
|
become: yes
|
||
|
|
with_items:
|
||
|
|
- "{{ sshd__key_types_list | difference( sshd__key_types ) }}"
|
||
|
|
notify:
|
||
|
|
- systemctl restart ssh
|
||
|
|
|
||
|
|
- name: make sure the correct pubkeys are available
|
||
|
|
file:
|
||
|
|
path: '/etc/ssh/ssh_host_{{ item }}_key.pub'
|
||
|
|
state: absent
|
||
|
|
become: yes
|
||
|
|
with_items:
|
||
|
|
- "{{ sshd__key_types_list | difference( sshd__key_types ) }}"
|
||
|
|
notify:
|
||
|
|
- systemctl restart ssh
|