ansible/ansible
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

moved sshbanner to general, added to rhel environments

Browse Source
This commit is contained in:
Bryan Joshua Pedini 2022-12-03 15:16:11 +01:00
parent e08d153757
commit 8c21e1d365
4 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sshbanner-bjphoster.yml
View File

@ -2,5 +2,8 @@
- hosts: all - hosts: all
become: true become: true
tasks: tasks:
- import_tasks: tasks/debian-general/sshbanner-bjphoster.yml - import_tasks: tasks/general/sshbanner-bjphoster.yml
- import_tasks: tasks/debian-general/sshbanner.yml - import_tasks: tasks/debian-general/sshbanner.yml
when: ansible_facts["os_family"] == "Debian"
- import_tasks: tasks/rhel-general/sshbanner.yml
when: ansible_facts["os_family"] == "RedHat"

0
tasks/debian-general/sshbanner-bjphoster.yml → tasks/general/sshbanner-bjphoster.yml
View File

5
tasks/rhel-general/restart-ssh-service.yml Normal file
View File

@ -0,0 +1,5 @@
---
- name: Restart SSH service to apply new rules
ansible.builtin.systemd:
name: sshd
state: restarted

7
tasks/rhel-general/sshbanner.yml Normal file
View File

@ -0,0 +1,7 @@
---
- name: Ensure SSH banner is uncommented and right path in /etc/ssh/sshd_config
ansible.builtin.lineinfile:
line: "Banner /etc/banner"
path: /etc/ssh/sshd_config
regexp: '^#\s*Banner.*$'
- import_tasks: restart-ssh-service.yml