ssh.yml 742 B

1234567891011121314151617181920212223
  1. ---
  2. - name: Create dot-SSH directory for monitoring user
  3. file:
  4. path: "{{ monitored_homedir }}/.ssh/"
  5. state: directory
  6. owner: "{{ monitored_user }}"
  7. group: "{{ monitored_group }}"
  8. mode: 0700
  9. - name: Copy SSH authorized_keys for monitoring user
  10. authorized_key:
  11. user: "{{ monitored_user }}"
  12. key: "{{ lookup('file', item) }}"
  13. key_options: 'no-agent-forwarding,no-port-forwarding,no-X11-forwarding,no-pty{% if monitored_ssh_key_wrapper %},command="{{ monitored_ssh_key_wrapper }}"{% endif %}'
  14. with_items: monitored_ssh_key_files
  15. - name: Copy SSH wrapper
  16. copy:
  17. src: "{{ monitored_ssh_key_wrapper_src }}"
  18. path: "{{ monitored_ssh_key_wrapper }}"
  19. mode: 0755
  20. when: monitored_ssh_key_wrapper_src