manage sshd_config and ssh_config only if pillars are defined

This commit is contained in:
ek9 2017-02-24 21:13:52 +01:00
parent c03e29a498
commit 038a51cdc8

View File

@ -3,6 +3,7 @@
include: include:
- openssh - openssh
{% if salt['pillar.get']('sshd_config', False) %}
sshd_config: sshd_config:
file.managed: file.managed:
- name: {{ openssh.sshd_config }} - name: {{ openssh.sshd_config }}
@ -12,7 +13,9 @@ sshd_config:
- mode: 644 - mode: 644
- watch_in: - watch_in:
- service: openssh - service: openssh
{% endif %}
{% if salt['pillar.get']('ssh_config', False) %}
ssh_config: ssh_config:
file.managed: file.managed:
- name: {{ openssh.ssh_config }} - name: {{ openssh.ssh_config }}
@ -20,6 +23,7 @@ ssh_config:
- template: jinja - template: jinja
- user: root - user: root
- mode: 644 - mode: 644
{% endif %}
{% for keyType in ['ecdsa', 'dsa', 'rsa', 'ed25519'] %} {% for keyType in ['ecdsa', 'dsa', 'rsa', 'ed25519'] %}
{% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %} {% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %}