evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity

evolinux-users: Fix "disable root login" task

Browse source
This commit is contained in:
Alexis Ben Miloud--Josselin 2023-06-20 11:58:18 +02:00
parent 0098cd2f08
commit 86978a8225
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
evolinux-users/tasks/ssh.yml
View file

@ -66,7 +66,7 @@
- evolinux_root_disable_ssh | bool
- ansible_distribution_major_version is version('11', '<=')
- name: verify PermitRootLogin directive
- name: verify PermitRootLogin directive (Debian >= 12)
ansible.builtin.command:
cmd: "grep -Er '^PermitRootLogin' /etc/ssh"
changed_when: False
@ -81,12 +81,12 @@
var: grep_permitrootlogin_ssh
verbosity: 1
- name: disable root login (Debian <= 12)
ansible.builtin.replace:
- name: disable root login (Debian >= 12)
ansible.builtin.lineinfile:
path: /etc/ssh/sshd_config.d/z-evolinux-defaults.conf
line: "PermitRootLogin no"
create: yes
validate: '/usr/sbin/sshd -t -f /etc/ssh/sshd_config.d/z-evolinux-defaults.conf'
validate: '/usr/sbin/sshd -t -f %s'
notify: reload sshd
when:
- evolinux_root_disable_ssh | bool