diff --git a/playbooks/ssh.yml b/playbooks/ssh.yml new file mode 100644 index 0000000..cca69be --- /dev/null +++ b/playbooks/ssh.yml @@ -0,0 +1,51 @@ +- name: configure ssh + hosts: apache-intranet + become: true + + tasks: + + - name: copy the favourite icon + copy: + src: ../configs/favicon.ico + dest: /var/www/intranet + owner: root + group: root + mode: 0644 + + - name: create .ssh dir for jigglypuff + file: + path: "/home/jigglypuff/.ssh" + state: directory + owner: jigglypuff + group: jigglypuff + mode: 0700 + + - name: create custom jigglypuff ssh parameters + ansible.builtin.copy: + src: "{{ item }}" + dest: /etc/ssh/sshd_config.d/ + owner: root + group: root + mode: 0644 + loop: + - ../configs/jigglypuff.conf + - ../configs/password-login.conf + - ../configs/root-login.conf + + - name: generate jigglypuff's ssh key pair + community.crypto.openssh_keypair: + path: "./jigglypuff" + type: ed25519 + delegate_to: localhost + + - name: install jigglypuff's public key + ansible.posix.authorized_key: + user: jigglypuff + state: present + key: "{{ lookup('file', playbook_dir + '/jigglypuff.pub') }}" + + + - name: restart ssh + ansible.builtin.systemd: + name: ssh + state: restarted \ No newline at end of file