21 lines
450 B
YAML
21 lines
450 B
YAML
|
---
|
||
|
|
- name: Disable SSH passwords
|
||
|
|
become: true
|
||
|
|
lineinfile:
|
||
|
|
path: /etc/ssh/sshd_config
|
||
|
|
regexp: '^#?\w*PasswordAuthentication (yes|no)'
|
||
|
|
line: 'PasswordAuthentication no'
|
||
|
|
register: changed_ssh_config
|
||
|
|
- name: Enable SSH
|
||
|
|
become: true
|
||
|
|
systemd:
|
||
|
|
name: ssh.service
|
||
|
|
enabled: yes
|
||
|
|
state: started
|
||
|
|
- name: Restart SSH
|
||
|
|
become: true
|
||
|
|
systemd:
|
||
|
|
name: ssh.service
|
||
|
|
state: restarted
|
||
|
|
when: changed_ssh_config.changed == true
|