homeserver/roles/mgrote.deactivate_ssh_password_login/tasks/main.yml

---
  - name: prohibit ssh login with password
    become: yes
    ansible.builtin.lineinfile:
      path: /etc/ssh/sshd_config
      regexp: '#PasswordAuthentication yes'
      line: 'PasswordAuthentication no'
      state: present
      validate: "/usr/sbin/sshd -T -f %s"
    notify: restart_sshd
first commit 2020-08-18 11:57:53 +02:00			`---`
			`- name: prohibit ssh login with password`
			`become: yes`
FQCN eingeführt (#70) * template --> ansible.builtin.template * apt --> ansible.builtin.apt * lineinfile --> ansible.builtin.lineinfile * file --> ansible.builtin.file * blockinfile --> ansible.builtin.blockinfile * cron --> ansible.builtin.cron * timezone --> ansible.builtin.timezone * get_url --> ansible.builtin.get_url * group --> ansible.builtin.group * user --> ansible.builtin.user * unarchive --> ansible.builtin.unarchive * service --> ansible.builtin.service * apache2_module --> ansible.builtin.apache2_module * package --> ansible.builtin.apt * template --> ansible.builtin.template 2 2020-11-21 19:41:19 +01:00			`ansible.builtin.lineinfile:`
first commit 2020-08-18 11:57:53 +02:00			`path: /etc/ssh/sshd_config`
			`regexp: '#PasswordAuthentication yes'`
			`line: 'PasswordAuthentication no'`
			`state: present`
Bugfix: validate ssh conf, missing parameter 2020-12-25 20:56:42 +01:00			`validate: "/usr/sbin/sshd -T -f %s"`
first commit 2020-08-18 11:57:53 +02:00			`notify: restart_sshd`