Add permitrootlogin at beginning of file

2023-07-21 11:49:35 +02:00 · 2023-07-21 11:49:35 +02:00 · fbb0b73e3a
parent 7e15e01b14
commit fbb0b73e3a
1 changed files with 2 additions and 1 deletions
--- a/evolinux-users/tasks/ssh.yml
+++ b/evolinux-users/tasks/ssh.yml
@ -83,10 +83,11 @@

 - name: disable root login (Debian >= 12)
  ansible.builtin.lineinfile:
-    path: /etc/ssh/sshd_config.d/z-evolinux-defaults.conf
+    path: /etc/ssh/sshd_config.d/z-evolinux-users.conf
    line: "PermitRootLogin no"
    create: yes
    validate: '/usr/sbin/sshd -t -f %s'
+    insertbefore: "BOF"
  notify: reload sshd
  when:
    - evolinux_root_disable_ssh | bool