Sha256: b1c053697aca08cca35f323e43668deb8ca53b564b815203483d4f618b93ea31
Contents?: true
Size: 929 Bytes
Versions: 13
Compression:
Stored size: 929 Bytes
Contents
---
- name: add local ssh keys to authorized_keys
authorized_key: user={{server_user}} key="{{lookup('file', '~/.ssh/id_rsa.pub')}}"
- name: change permissions on authorized_keys
file: path=/home/{{server_user}}/.ssh/authorized_keys mode=0400
- name: change ssh port
sudo: true
action: lineinfile dest=/etc/ssh/sshd_config regexp="^#?Port" line="Port {{server_ssh_port}}"
- name: disable root user login via ssh
sudo: true
action: lineinfile dest=/etc/ssh/sshd_config regexp="^#?PermitRootLogin" line="PermitRootLogin no"
- name: disable password authentication
sudo: true
action: lineinfile dest=/etc/ssh/sshd_config regexp="^#?PasswordAuthentication" line="PasswordAuthentication no"
- name: allow deploy user login via ssh
sudo: true
action: lineinfile dest=/etc/ssh/sshd_config insertafter=EOF line="AllowUsers {{server_user}}"
- name: restart ssh service
action: service name=ssh state=restarted
Version data entries
13 entries across 13 versions & 2 rubygems