From e8cdba85c48dcbbd42e6fcb5be3aa2912008cb84 Mon Sep 17 00:00:00 2001
From: Emil Renner Berthing <esmil@labitat.dk>
Date: Tue, 7 Nov 2017 16:27:49 +0100
Subject: initial commit

---
 roles/space_server/tasks/sshd.yml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 roles/space_server/tasks/sshd.yml

(limited to 'roles/space_server/tasks/sshd.yml')

diff --git a/roles/space_server/tasks/sshd.yml b/roles/space_server/tasks/sshd.yml
new file mode 100644
index 0000000..8eaa8fc
--- /dev/null
+++ b/roles/space_server/tasks/sshd.yml
@@ -0,0 +1,32 @@
+---
+- name: Install sshd package
+  dnf:
+    name: openssh-server
+    state: latest
+  notify:
+    - restart sshd
+  tags:
+    - packages
+
+- name: Configure sshd
+  lineinfile:
+    path: '/etc/ssh/sshd_config'
+    regexp: '^PasswordAuthentication'
+    line: 'PasswordAuthentication no'
+  notify:
+    - restart sshd
+
+- name: Enable sshd service
+  systemd:
+    name: sshd.service
+    enabled: yes
+    masked: no
+    state: started
+  when: "'container' not in ansible_env"
+- name: '- when in nspawn'
+  command: systemctl enable sshd.service
+  args:
+    creates: '/etc/systemd/system/multi-user.target.wants/sshd.service'
+  when: "'container' in ansible_env"
+
+# vim: set ts=2 sw=2 et:
-- 
cgit v1.2.1