ssh.yml 780 B

123456789101112131415161718192021222324
  1. ---
  2. - name: Create dot-SSH directory for monitoring user
  3. file:
  4. path: "{{ monitored_homedir }}/.ssh/"
  5. state: directory
  6. owner: "{{ monitored_user }}"
  7. group: "{{ monitored_group }}"
  8. mode: 0700
  9. - name: Copy SSH authorized_keys for monitoring user
  10. authorized_key:
  11. user: "{{ monitored_user }}"
  12. key: "{{ lookup('file', item) }}"
  13. key_options: 'no-agent-forwarding,no-port-forwarding,no-X11-forwarding,no-pty{% if monitored_ssh_key_wrapper %},command="{{ monitored_ssh_key_wrapper }}"{% endif %}'
  14. with_items: "{{ monitored_ssh_key_files }}"
  15. - name: Copy SSH wrapper
  16. copy:
  17. src: "{{ monitored_ssh_key_wrapper_src }}"
  18. path: "{{ monitored_ssh_key_wrapper }}"
  19. mode: 0755
  20. backup: yes
  21. when: monitored_ssh_key_wrapper_src|default(null)