manala.ssh
#######################################################################################################
:exclamation: DEPRECATION :exclamation:
This repository and the role associated are deprecated in favor of the Manala Ansible Collection
You will find informations on its usage on the collection repository
#######################################################################################################
Ansible Role: SSH 
:exclamation: Report issues and send Pull Requests in the main Ansible Role repository :exclamation:
This role will deal with the following configuration:
- Allow sudo authentication over ssh
- Enable/Disable the SSH daemon password authentication
- Set the SSH daemon accepted environment variables
- Set ssh know hosts
It's part of the Manala Ansible stack but can be used as a stand alone component.
Requirements
None.
Dependencies
None.
Deprecations
Version 3.0.0 introduces few deprecations, but remains fully backward compatible.
Variables
manala_ssh_config_sshd_file -> manala_ssh_server_config_file
manala_ssh_config_sshd_template -> manala_ssh_server_config_template
manala_ssh_config_sshd -> manala_ssh_server_config
manala_ssh_config_file -> manala_ssh_client_config_file
manala_ssh_config_template -> manala_ssh_client_config_template
manala_ssh_config -> manala_ssh_client_config
Templates
config/*.j2 -> config/client/*.j2
config/sshd/*.j2 -> config/server/*.j2
Installation
Ansible 2+
Using ansible galaxy cli:
ansible-galaxy install manala.ssh
Using ansible galaxy requirements file:
- src: manala.ssh
Role Handlers
| Name | Type | Description |
|---|---|---|
ssh reload |
Service | Restart ssh service |
Role Variables
| Name | Default | Type | Description |
|---|---|---|---|
manala_ssh_install_packages |
~ | Array | Dependency packages to install |
manala_ssh_install_packages_default |
['openssh-server'] | Array | Default dependency packages to install |
manala_ssh_server |
true | Boolean | Enable server |
manala_ssh_server_config_file |
'/etc/ssh/sshd_config' | String | Server configuration file path |
manala_ssh_server_config_template |
'config/server/[distribution]_[release].j2' | String | Server default configuration template path |
manala_ssh_server_config |
~ | Array/String | Server configuration directives |
manala_ssh_client_config_file |
'/etc/ssh/ssh_config' | String | Client configuration file path |
manala_ssh_client_config_template |
'config/client/[distribution]_[release].j2' | String | Client default configuration template path |
manala_ssh_client_config |
~ | Array/String | Client configuration directives |
manala_ssh_known_hosts |
[] | Array | Known hosts |
Configuration example
Use default debian templates (recommended)
manala_ssh_server_config_template: config/server/debian/sshd_config.j2
manala_ssh_client_config_template: config/client/debian/ssh_config.j2
Use dict parameters:
manala_ssh_client_config:
Host *:
SendEnv: LANG LC_* FOO
manala_ssh_server_config:
AcceptEnv: LANG LC_* FOO
Match User bar:
AcceptEnv: LANG LC_* BAR
Use raw config:
manala_ssh_client_config: |
Host *
SendEnv LANG LC_* FOO
manala_ssh_server_config: |
AcceptEnv LANG LC_* FOO
Match User bar
AcceptEnv LANG LC_* BAR
Use dict's array parameters (deprecated):
manala_ssh_client_config:
- Host *:
- SendEnv: LANG LC_* FOO
manala_ssh_server_config:
- AcceptEnv: LANG LC_* FOO
- Match User bar:
- AcceptEnv: LANG LC_* BAR
Known hosts
manala_ssh_known_hosts:
- github.com
Example playbook
- hosts: servers
roles:
- role: manala.ssh
Licence
MIT
Author information
Manala (http://www.manala.io/)
ansible-galaxy install manala.ssh