Anpassungen für https://git.denkn.at/deac/ssh-ca, falls ssh-ca-role nicht verwendet wird.

This commit is contained in:
Denis Knauf 2022-02-28 17:56:59 +01:00
parent 255a4ab9f5
commit 333e24b61f
2 changed files with 8 additions and 5 deletions

View file

@ -1,6 +1,9 @@
ssh_ca_user: sshca
ssh_ca_base_dir: ~/.ssh-ca
ssh_ca_pub: '{{ssh_ca_base_dir}}/ca.pub'
ssh_ca_command: ~/ssh-ca
ssh_cert_sign_host: '{{ssh_ca_host}}'
ssh_cert_sign_user: '{{ssh_ca_user}}'
ssh_cert_host_pub_path: /etc/ssh/ssh_host_ed25519_key.pub
ssh_cert_host_cert_path: /etc/ssh/ssh_host_ed25519_key-cert.pub
ssh_cert_host_capub_path: /etc/ssh/ca.pub