diff --git a/roles/sshd/tasks/main.yml b/roles/sshd/tasks/main.yml new file mode 100644 index 0000000..3a0d0dc --- /dev/null +++ b/roles/sshd/tasks/main.yml @@ -0,0 +1,33 @@ +--- +- name: Install SSH Banner + become: true + template: + src: motd.j2 + dest: /etc/issue.net + mode: 0644 + +- name: Set parameters in sshd config + become: true + lineinfile: + path: /etc/ssh/sshd_config + regexp: "{{ item.match }}" + line: "{{ item.set }}" + state: present + loop: + - match: "#?PermitRootLogin (yes|no)" + set: "PermitRootLogin no" + - match: "#?Banner (none|/etc/issue.net)" + set: "Banner /etc/issue.net" + - match: "#?PasswordAuthentication (yes|no)" + set: "PasswordAuthentication no" + - match: "#?GSSAPIAuthentication (yes|no)" + set: "GSSAPIAuthentication no" + - match: "#?ChallengeResponseAuthentication (yes|no)" + set: "ChallengeResponseAuthentication no" + +- name: Restart sshd service + when: restart_services | default(false) == true + become: true + systemd: + name: sshd + state: restarted diff --git a/roles/sshd/templates/motd.j2 b/roles/sshd/templates/motd.j2 new file mode 100644 index 0000000..cea9d12 --- /dev/null +++ b/roles/sshd/templates/motd.j2 @@ -0,0 +1,7 @@ + + //////////// //// //// /////////// + //// ////// //// //// //// + //////// //// /// //// /////////// + //// //// ////// //// + //////////// //// //// {{ description | default('Omni Network System') }} + _______________________________{{ description | default('Omni Network System') | length * '\\' }}\