Ansible/ssh-hardening
1
0
Fork 0
Code Issues 9 Pull requests 1 Projects Releases Wiki Activity

Ensure ed25519 key ist present

Browse source
This commit is contained in:
Sven Velt 2024-07-10 11:21:47 +02:00
parent 18ed1ea57e
commit a03b1528c7
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
tasks/main.yml
View file

@ -62,6 +62,13 @@
notify: Restart SSH notify: Restart SSH
- name: "Ensure ED25519 hostkey is available"
openssh_keypair:
path: /etc/ssh/ssh_host_ed25519_key
type: ed25519
when: '"ed25519" in ssh_hardening_hostkeys'
- name: "Renew RSA hostkeys if too short" - name: "Renew RSA hostkeys if too short"
openssh_keypair: openssh_keypair:
path: /etc/ssh/ssh_host_rsa_key path: /etc/ssh/ssh_host_rsa_key