From 125d5a727d78863d8f9c2f5906425e0b1eb26651 Mon Sep 17 00:00:00 2001
From: Emil Renner Berthing <esmil@labitat.dk>
Date: Wed, 26 Sep 2018 15:18:26 +0200
Subject: space_server: sshd: keep host keys in secrets.yml

---
 roles/space_server/tasks/sshd.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

(limited to 'roles/space_server/tasks/sshd.yml')

diff --git a/roles/space_server/tasks/sshd.yml b/roles/space_server/tasks/sshd.yml
index aaf6452..63f3367 100644
--- a/roles/space_server/tasks/sshd.yml
+++ b/roles/space_server/tasks/sshd.yml
@@ -6,6 +6,30 @@
   tags:
   - packages
 
+- name: Create private host keys
+  copy:
+    dest: '/etc/ssh/{{ item.key }}'
+    content: '{{ item.value.private }}'
+    owner: root
+    group: ssh_keys
+    mode: 0640
+  with_dict: '{{ ssh_host_keys }}'
+  loop_control:
+    label: '/etc/ssh/{{ item.key }}'
+  when: ssh_host_keys is defined
+
+- name: Create public host keys
+  copy:
+    dest: '/etc/ssh/{{ item.key }}.pub'
+    content: '{{ item.value.public }}'
+    owner: root
+    group: root
+    mode: 0644
+  with_dict: '{{ ssh_host_keys }}'
+  loop_control:
+    label: '/etc/ssh/{{ item.key }}.pub'
+  when: ssh_host_keys is defined
+
 - name: Configure sshd
   lineinfile:
     path: '/etc/ssh/sshd_config'
-- 
cgit v1.2.1