evolix/EvoBSD
21
0
Fork 0
Code Issues 2 Pull requests Releases 3 Wiki Activity

accounts: use a variable for sshd PermitRootLogin

Browse source
This commit is contained in:
Jérémy Dubois 2022-09-02 17:16:30 +02:00
parent aed61c3df6
commit 3d941a99a3
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/accounts/defaults/main.yml Normal file
View file

@ -0,0 +1,2 @@
---
evobsd_root_login: "no"

4
roles/accounts/tasks/main.yml
View file

@ -107,8 +107,8 @@
- name: "Disable root login" - name: "Disable root login"
replace: replace:
dest: /etc/ssh/sshd_config dest: /etc/ssh/sshd_config
regexp: '^PermitRootLogin (yes|without-password|prohibit-password)' regexp: '^PermitRootLogin\s+(yes|without-password|prohibit-password)'
replace: "PermitRootLogin no" replace: "PermitRootLogin {{ evobsd_root_login }}"
notify: reload sshd notify: reload sshd
tags: tags:
- accounts - accounts