known_hosts: @cert-authority allowes domain itself, instead of only subdomains.

master
Denis Knauf 2022-02-28 18:11:11 +01:00
parent 333e24b61f
commit 46d6b2c72d
1 changed files with 1 additions and 1 deletions

View File

@ -74,7 +74,7 @@
hash_host: false
path: /etc/ssh/ssh_known_hosts
name: '{{ssh_cert_known_domain}}'
key: "@cert-authority *.{{ssh_cert_known_domain}} {{lookup('file', ssh_cert_host_capub_path)}}"
key: "@cert-authority *.{{ssh_cert_known_domain}},{{ssh_cert_known_domain}} {{lookup('file', ssh_cert_host_capub_path)}}"
- name: install ssh-cert-renew
copy: