workstation/roles/distro/tasks/ssh.yml

20 lines
434 B
YAML

---
- name: Disable SSH passwords
become: true
lineinfile:
path: /etc/ssh/sshd_config
regexp: '^#?\w*PasswordAuthentication (yes|no)'
line: 'PasswordAuthentication no'
register: changed_ssh_config
- name: Enable SSH
become: true
service:
name: ssh
enabled: yes
state: started
- name: Restart SSH
become: true
service:
name: ssh
state: restarted
when: changed_ssh_config.changed == true