workstation/roles/distro/tasks/ssh.yml

34 lines
839 B
YAML

---
- name: Disable SSH passwords
become: true
lineinfile:
path: /etc/ssh/sshd_config
regexp: '^#?\w*PasswordAuthentication (yes|no)'
line: 'PasswordAuthentication no'
register: changed_ssh_config
- name: Enable SSH (Linux)
become: true
systemd:
name: ssh.service
enabled: yes
state: started
when: ansible_system == 'Linux'
- name: Enable SSH (FreeBSD)
become: true
service:
name: sshd
enabled: yes
state: started
when: ansible_system == 'FreeBSD'
- name: Restart SSH (Linux)
become: true
systemd:
name: ssh.service
state: restarted
when: changed_ssh_config.changed == true and ansible_system == 'Linux'
- name: Restart SSH (FreeBSD)
become: true
service:
name: sshd
state: restarted
when: changed_ssh_config.changed == true and ansible_system == 'FreeBSD'