1234567891011121314151617 |
- ---
- - name: Update SSH configuration
- replace: >
- dest=/etc/ssh/sshd_config
- regexp="^([\#\s]*)?{{item.key}}\s+([\w_-]+)"
- replace="{{item.key}} {{item.value}}"
- backup=yes
- with_items:
- - key: PermitRootLogin
- value: 'without-password'
- - key: PasswordAuthentication
- value: 'no'
- - key: ChallengeResponseAuthentication
- value: 'no'
- notify:
- - reload ssh
|