Skip to content
Snippets Groups Projects
Commit 58c0f0ac authored by Lars Beckers's avatar Lars Beckers
Browse files

ssh-server: deploy ssh-config to enable SSHFP checking

parent bc03a4dc
No related branches found
No related tags found
1 merge request!5ssh-server: deploy ssh-config to enable SSHFP checking
Pipeline #1852 passed
Stage: test
Show whitespace changes
Inline Side-by-side
ssh-server/tasks/main.yml
+ 12
− 0
View file @ 58c0f0ac
...@@ -38,6 +38,18 @@ ...@@ -38,6 +38,18 @@
tags: tags:
- ssh - ssh
- name: ensure ssh is configured
template:
src: ssh_config.j2
dest: /etc/ssh/ssh_config
owner: root
group: root
mode: '0644'
backup: true
when: debian_version != "jessie"
tags:
- ssh
- name: ensure standard pam configuration for sshd - name: ensure standard pam configuration for sshd
copy: copy:
src: pam/sshd src: pam/sshd
......
ssh-server/templates/ssh_config → ssh-server/templates/ssh_config.j2
+ 1
− 0
View file @ 58c0f0ac
...@@ -52,3 +52,4 @@ Host * ...@@ -52,3 +52,4 @@ Host *
HashKnownHosts yes HashKnownHosts yes
GSSAPIAuthentication yes GSSAPIAuthentication yes
GSSAPIDelegateCredentials no GSSAPIDelegateCredentials no
VerifyHostKeyDNS yes
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment