freifunk/Ansible-Configuration Changeset - 50569dca4de8 · Chaos Computer Club Lëtzebuerg Projects

Changeset - 50569dca4de8

Parent rev.

Child rev.

[Not reviewed]

0 1 0

x - 21 months ago 2023-08-24 01:28:12
xbr@c3l.lu

fix: block content in copy should not be quoted, initial_setup

1 file changed with 6 insertions and 6 deletions:

initial_server_setup/initial_setup.yml

0 comments (0 inline, 0 general)

initial_server_setup/initial_setup.yml

➞

Show inline comments

@@ @@ -46,44 +46,44 @@ @@
         regexp: "^{{ ansible_default_ipv6.address }}"
         line: "{{ ansible_default_ipv6.address }} {{ inventory_hostname }} {{ inventory_hostname }}.freifunk.lu"
         state: present
       tags: network,hostname,dns
     # SSH security improvements (EmptyPass, PassAuth, RootLogin)
     - name: Disable SSH Password Auth
       ansible.builtin.copy:
         dest: /etc/ssh/sshd_config.d/disable_password_auth.conf
         owner: root
         mode: u=rw,g=r,o=r
         content: |
           '# {{ ansible_managed }}'
           'PasswordAuthentication no'
           # {{ ansible_managed }}
           PasswordAuthentication no
       tags: network,ssh
     - name: Disable SSH Empty Password
       ansible.builtin.copy:
         dest: /etc/ssh/sshd_config.d/disable_empty_password.conf
         owner: root
         mode: u=rw,g=r,o=r
         content: |
           '# {{ ansible_managed }}'
           'PermitEmptyPasswords no'
           # {{ ansible_managed }}
           PermitEmptyPasswords no
       tags: network,ssh
     - name: Disable SSH Root Login
       ansible.builtin.copy:
         dest: /etc/ssh/sshd_config.d/disable_root_login.conf
         owner: root
         mode: u=rw,g=r,o=r
         content: |
           '# {{ ansible_managed }}'
           'PermitRootLogin no'
           # {{ ansible_managed }}
           PermitRootLogin no
       tags: network,ssh
     - name: Reload SSHD
       ansible.builtin.service:
         name: "sshd"
         state: "reloaded"
       tags: network,ssh
     # Create Freifunk Users
     - name: Create member users
       ansible.builtin.user:
         name: "{{ item.username }}"
         password: "{{ password | password_hash('sha512') }}"

0 comments (0 inline, 0 general)