Skip to content

Latest commit

 

History

History
94 lines (67 loc) · 2.25 KB

README.md

File metadata and controls

94 lines (67 loc) · 2.25 KB
Raw

SSHD

Build Status

The sshd role allows you to manage your sshd configuration. This role allows you to manage the /etc/ssh/ssh_config file as host or group variables. You can choose to use the default configuration settings, or replace the default variables with your own, preferred sshd_config file settings.

Variables

Role Variables

  1. opensshd_enabled
  2. opensshd_manage_service
  3. opensshd_allow_reload
  4. opensshd_manage_var_run
  5. opensshd_skip_defaults

Openssh Configuration Variables

  • opensshd_defaults
  • opensshd
  • opensshd_SSHD Directive

Default OS Variables

These variables should not be modified, as they are set for each OS.

  1. opensshd_packages
  2. opensshd_config_owner
  3. opensshd_config_group
  4. opensshd_config_mode
  5. opensshd_config_file
  6. opensshd_binary
  7. opensshd_service
  8. opensshd_sftp_server
  9. opensshd_defaults
  10. opensshd_os_supported

User Variables

Users are encouraged to modify the role variables inside their group_vars folder.

Tasks

Description

  1. Installs sshd, if necessary.
  2. Modifies the SSHD configuration file.
  3. Restarts SSHD, if necessary.

Changed Files

  • /etc/ssh/sshd_config

Installed Programs

The OpenSSH Server program may be installed as a part of this role.

Role Actions

This role installs sshd and configures it using the following variables in the order from most specific to least specific:

  1. opensshd_Directive
  2. opensshd
  3. opensshd_defaults

Example

vars/default.yml

opensshd_defaults:
  Port: 22

group_vars/somegroup

opensshd:
  Port: 222

host_vars/somehost.somegroup

opensshd_Port: 2222

Given the previously mentioned setup, the following are true:

  • For any host that is not in the group somegroup, and not named somehost, the ssh service will be run on port 22.
  • For any host that is part of the group somegroup, but not named somehost, the ssh service will be run on port 222.
  • For the singular host named somehost, the ssh service will be run on port 2222.