Kaynağa Gözat

regeneration also for root target directories

master
ebeveyn
işleme
0810f96280
2 değiştirilmiş dosya ile 28 ekleme ve 7 silme
  1. +4
    -0
      defaults/main.yml
  2. +24
    -7
      tasks/regenerate.yml

+ 4
- 0
defaults/main.yml Dosyayı Görüntüle

@@ -1,3 +1,7 @@
ssh_host_key_type: ed25519
ssh_host_key_types:
- ed25519
- ecdsa
- rsa
ssh_ip: "{{ansible_host}}"
ssh_host_key_state: configured

+ 24
- 7
tasks/regenerate.yml Dosyayı Görüntüle

@@ -1,11 +1,28 @@
---

- name: delete ssh host keys
- name: ssh config directory
file:
path: "{{item}}"
state: absent
with_fileglob:
- /etc/ssh/ssh_host_*
path: "{{ root_target_directory | default('') }}/etc/ssh"
state: directory

- name: reconfigure ssh server
shell: dpkg-reconfigure openssh-server
- name: delete old ssh host private keys
#file:
# path: "{{ item }}"
# state: absent
#with_fileglob:
# - "{{ root_target_directory | default('') }}/etc/ssh/ssh_host_*"
shell: rm {{ root_target_directory | default('') }}/etc/ssh/ssh_host_*
args:
warn: false
register: _ssh_delete_host_keys_command
failed_when: _ssh_delete_host_keys_command.rc > 1
changed_when: _ssh_delete_host_keys_command.rc == 0

- name: generate new ssh host keys
command: ssh-keygen -f {{ root_target_directory | default('') }}/etc/ssh/ssh_host_{{item}}_key -N "" -t {{item}}
with_items: "{{ssh_host_key_types}}"

- service:
name: sshd
state: reloaded
when: not root_target_directory is defined

Yükleniyor…
İptal
Kaydet