29 lines
541 B
YAML
29 lines
541 B
YAML
---
|
|
|
|
- name: ensure sshd is enabled
|
|
ansible.builtin.systemd:
|
|
name: sshd
|
|
enabled: true
|
|
tags: all,ssh
|
|
|
|
- name: deploy sshd_config
|
|
ansible.builtin.template:
|
|
src: sshd_config.j2
|
|
dest: /etc/ssh/sshd_config
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
validate: "sshd -T -f %s"
|
|
notify: restart ssh
|
|
tags: all,ssh
|
|
|
|
- name: deploy rsyslog conf
|
|
ansible.builtin.template:
|
|
src: auth.conf.j2
|
|
dest: /etc/rsyslog.d/auth.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
notify: restart rsyslog
|
|
tags: all,ssh
|