diff --git a/sshbanner-bjphoster.yml b/sshbanner-bjphoster.yml index ddc180c..37ab4a0 100644 --- a/sshbanner-bjphoster.yml +++ b/sshbanner-bjphoster.yml @@ -2,5 +2,8 @@ - hosts: all become: true tasks: - - import_tasks: tasks/debian-general/sshbanner-bjphoster.yml + - import_tasks: tasks/general/sshbanner-bjphoster.yml - import_tasks: tasks/debian-general/sshbanner.yml + when: ansible_facts["os_family"] == "Debian" + - import_tasks: tasks/rhel-general/sshbanner.yml + when: ansible_facts["os_family"] == "RedHat" diff --git a/tasks/debian-general/sshbanner-bjphoster.yml b/tasks/general/sshbanner-bjphoster.yml similarity index 100% rename from tasks/debian-general/sshbanner-bjphoster.yml rename to tasks/general/sshbanner-bjphoster.yml diff --git a/tasks/rhel-general/restart-ssh-service.yml b/tasks/rhel-general/restart-ssh-service.yml new file mode 100644 index 0000000..e814d68 --- /dev/null +++ b/tasks/rhel-general/restart-ssh-service.yml @@ -0,0 +1,5 @@ +--- +- name: Restart SSH service to apply new rules + ansible.builtin.systemd: + name: sshd + state: restarted diff --git a/tasks/rhel-general/sshbanner.yml b/tasks/rhel-general/sshbanner.yml new file mode 100644 index 0000000..b335671 --- /dev/null +++ b/tasks/rhel-general/sshbanner.yml @@ -0,0 +1,7 @@ +--- +- name: Ensure SSH banner is uncommented and right path in /etc/ssh/sshd_config + ansible.builtin.lineinfile: + line: "Banner /etc/banner" + path: /etc/ssh/sshd_config + regexp: '^#\s*Banner.*$' +- import_tasks: restart-ssh-service.yml