Config: Add support for generating keys
This commit is contained in:
		
							parent
							
								
									73eaef4ea0
								
							
						
					
					
						commit
						6fb57f40bc
					
				| @ -14,7 +14,14 @@ sshd_config: | ||||
|       - service: openssh | ||||
| 
 | ||||
| {% for keyType in ['ecdsa', 'dsa', 'rsa'] %} | ||||
| {% if salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %} | ||||
| {% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %} | ||||
| ssh_generate_host_{{ keyType }}_key: | ||||
|   cmd.run: | ||||
|     - name: ssh-keygen -t {{ keyType }} -N '' -f /etc/ssh/ssh_host_{{ keyType }}_key | ||||
|     - creates: /etc/ssh/ssh_host_{{ keyType }}_key | ||||
|     - user: root | ||||
| 
 | ||||
| {% elif salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %} | ||||
| ssh_host_{{ keyType }}_key: | ||||
|   file.managed: | ||||
|     - name: /etc/ssh/ssh_host_{{ keyType }}_key | ||||
|  | ||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user
	 Alan Pearce
						Alan Pearce