deac/ansible-role-ssh-cert
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

user|host (wrong) -> user@host (correct)

Browse source
This commit is contained in:
Denis Knauf 2022-03-15 10:59:21 +01:00
parent 46d6b2c72d
commit 79b66529c8
2 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
defaults/main.yml
View file

@ -2,6 +2,7 @@ ssh_ca_user: sshca
ssh_ca_base_dir: ~/.ssh-ca ssh_ca_base_dir: ~/.ssh-ca
ssh_ca_pub: '{{ssh_ca_base_dir}}/ca.pub' ssh_ca_pub: '{{ssh_ca_base_dir}}/ca.pub'
ssh_ca_command: ~/ssh-ca ssh_ca_command: ~/ssh-ca
ssh_cert_known_domain: '*'
ssh_cert_sign_host: '{{ssh_ca_host}}' ssh_cert_sign_host: '{{ssh_ca_host}}'
ssh_cert_sign_user: '{{ssh_ca_user}}' ssh_cert_sign_user: '{{ssh_ca_user}}'
ssh_cert_host_pub_path: /etc/ssh/ssh_host_ed25519_key.pub ssh_cert_host_pub_path: /etc/ssh/ssh_host_ed25519_key.pub

4
tasks/main.yml
View file

@ -74,7 +74,7 @@
hash_host: false hash_host: false
path: /etc/ssh/ssh_known_hosts path: /etc/ssh/ssh_known_hosts
name: '{{ssh_cert_known_domain}}' name: '{{ssh_cert_known_domain}}'
key: "@cert-authority *.{{ssh_cert_known_domain}},{{ssh_cert_known_domain}} {{lookup('file', ssh_cert_host_capub_path)}}" key: "@cert-authority {{ssh_cert_known_domain}} {{lookup('file', ssh_cert_host_capub_path)}}"
- name: install ssh-cert-renew - name: install ssh-cert-renew
copy: copy:
@ -107,7 +107,7 @@
with_dict: with_dict:
ssh_cert_mail_to: '{{ssh_cert_mail_to |mandatory}}' ssh_cert_mail_to: '{{ssh_cert_mail_to |mandatory}}'
ssh_cert_mail_from: '{{ssh_cert_mail_from|mandatory}}' ssh_cert_mail_from: '{{ssh_cert_mail_from|mandatory}}'
ssh_cert_sign_host: '{{ssh_cert_sign_user|mandatory}}|{{ssh_cert_sign_host|mandatory}}' ssh_cert_sign_host: '{{ssh_cert_sign_user|mandatory}}@{{ssh_cert_sign_host|mandatory}}'
- name: renew host ssh-cert - name: renew host ssh-cert
systemd: systemd: