aboutsummaryrefslogtreecommitdiffstats
path: root/roles
diff options
context:
space:
mode:
Diffstat (limited to 'roles')
-rw-r--r--roles/ssh/tasks/generate_dns.yml8
-rw-r--r--roles/ssh/tasks/main.yml23
-rw-r--r--roles/ssh/templates/generate_dns.j224
-rw-r--r--roles/ssh/templates/sshd_config.j225
4 files changed, 0 insertions, 80 deletions
diff --git a/roles/ssh/tasks/generate_dns.yml b/roles/ssh/tasks/generate_dns.yml
deleted file mode 100644
index 60a21bd..0000000
--- a/roles/ssh/tasks/generate_dns.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-
-# ssh ~~ tasks/local_dns.yml
-
-- name: Generate template to localhost
- template:
- src: templates/generate_dns.j2
- dest: "{{ lookup('env', 'HOME') }}/.ssh/config.d/ssh_dns"
- delegate_to: 127.0.0.1
diff --git a/roles/ssh/tasks/main.yml b/roles/ssh/tasks/main.yml
deleted file mode 100644
index 0fc2dee..0000000
--- a/roles/ssh/tasks/main.yml
+++ /dev/null
@@ -1,23 +0,0 @@
-
-# ssh ~~ tasks/main.yml
-
----
-
-- name: Generate sshd configuration
- template:
- src: templates/sshd_config.j2
- dest: /etc/ssh/sshd_config
- owner: root
- group: "{{ group_root }}"
- mode: "0644"
-
-- name: Restart sshd
- service:
- name: sshd
- state: restarted
-
-- name: Check ssh connection
- wait_for:
- port: 22
- delay: 1
- state: started
diff --git a/roles/ssh/templates/generate_dns.j2 b/roles/ssh/templates/generate_dns.j2
deleted file mode 100644
index 5d58ae9..0000000
--- a/roles/ssh/templates/generate_dns.j2
+++ /dev/null
@@ -1,24 +0,0 @@
-
-# ssh configuration for dns ~~ ~/.ssh/.config.d/
-# managed by Ansible
-
-{% for h in groups["all"] %}
-{% set h = hostvars[h] %}
-{##}
-{% if h.ip is defined and h.services is defined %}
-{% set _port = h.services | selectattr("name", "equalto", "ssh") | map(attribute="port") | list | join(' ') %}
-{##}
-# {{ h.ansible_host }}
-
-Match originalhost {{ h.ansible_host }} exec "ls /sys/class/net/{{ _i.dcontroller }} && ! ping -c 1 -W 5 {{ h.ip.out }}"
- HostName {{ h.ip.in }}
- Port {{ _port }}
-
-Match originalhost {{ h.ansible_host }}
- HostName {{ h.ip.out }}
- Port {{ _port }}
- User root
-
-{% endif %}
-{##}
-{% endfor %}
diff --git a/roles/ssh/templates/sshd_config.j2 b/roles/ssh/templates/sshd_config.j2
deleted file mode 100644
index a11268e..0000000
--- a/roles/ssh/templates/sshd_config.j2
+++ /dev/null
@@ -1,25 +0,0 @@
-
-# ssh ~~ /etc/ssh/sshd_config
-# managed by Ansible
-
-# security
-PermitRootLogin yes
-MaxAuthTries 6
-MaxSessions 10
-
-# auth
-AuthorizedKeysFile .ssh/authorized_keys
-PasswordAuthentication no
-PermitEmptyPasswords no
-ClientAliveInterval 180
-
-
-{% if ansible_facts["os_family"] == "OpenBSD" or ansible_facts["os_family"] == "Alpine" %}
-Subsystem sftp /usr/libexec/sftp-server
-{% elif ansible_facts["os_family"] == "Debian" %}
-ChallengeResponseAuthentication no
-UsePAM yes
-PrintMotd no
-UsePrivilegeSeparation sandbox
-Subsystem sftp /usr/lib/ssh/sftp-server
-{% endif %}
remember that computers suck.