Add local auth and ssh keyauth deployment playbooks

This commit is contained in:
2019-12-01 14:14:25 -05:00
parent 6b5df945de
commit c32fc17550
3 changed files with 99 additions and 27 deletions

View File

@@ -1,32 +1,22 @@
---
- hosts: all
name: Update ssh keys on all devices
- name: Update ssh keys on all devices
hosts: all
tasks:
- import_tasks: tasks/users-preprocessing.yml
- import_tasks: tasks/preprocess-local-users.yml
- name: Install public keys
tags: users_keys
- name: Ensure SSH directory exists
become: true
block:
- name: Ensure SSH directory exists
file:
state: directory
path: /home/{{ item.name }}/.ssh
loop: "{{ local_users | difference([None]) }}"
file:
state: directory
path: /home/{{ item.name }}/.ssh
loop: "{{ users_local }}"
- name: Put keys on remote
when: item.keys != []
authorized_key:
user: "{{ item.name }}"
key: "{{ item.sshkeys | join('\n') }}"
state: present
exclusive: yes
loop: "{{ local_users | difference([None]) }}"
- hosts: all
name: Disable SSH password authentication
tags:
- always
tasks:
- import_tasks: tasks/sshd/disable-password-auth.yml
when: enable_ssh_password_auth|bool == false
- name: Put keys on remote
become: true
when: item.keys != []
authorized_key:
user: "{{ item.name }}"
key: "{{ item.sshkeys | join('\n') }}"
state: present
exclusive: yes
loop: "{{ users_local }}"