28 lines
867 B
YAML
28 lines
867 B
YAML
---
|
|
- name: set ssh CA pub keys
|
|
template:
|
|
src: 'trusted_user_ca_keys.j2'
|
|
dest: '{{ ssh_trusted_user_ca_keys_file }}'
|
|
mode: '0644'
|
|
owner: '{{ ssh_owner }}'
|
|
group: '{{ ssh_group }}'
|
|
notify: restart sshd
|
|
|
|
- name: create ssh authorized principals directories
|
|
file:
|
|
path: '{{ item.path | dirname }}'
|
|
mode: '{{ item.directorymode | default(0700) }}'
|
|
owner: '{{ item.directoryowner | default(ssh_owner) }}'
|
|
group: '{{ item.directorygroup | default(ssh_group) }}'
|
|
state: directory
|
|
loop: '{{ ssh_authorized_principals }}'
|
|
|
|
- name: set ssh authorized principals
|
|
template:
|
|
src: 'authorized_principals.j2'
|
|
dest: '{{ item.path }}'
|
|
mode: '{{ item.filemode | default(0600) }}'
|
|
owner: '{{ item.owner| default(ssh_owner) }}'
|
|
group: '{{ item.group | default(ssh_group) }}'
|
|
loop: '{{ ssh_authorized_principals }}'
|