Config: Add support for generating keys

This commit is contained in:
Alan Pearce 2014-08-24 16:08:41 +01:00
parent 73eaef4ea0
commit 6fb57f40bc

View File

@ -14,7 +14,14 @@ sshd_config:
- service: openssh - service: openssh
{% for keyType in ['ecdsa', 'dsa', 'rsa'] %} {% for keyType in ['ecdsa', 'dsa', 'rsa'] %}
{% if salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %} {% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %}
ssh_generate_host_{{ keyType }}_key:
cmd.run:
- name: ssh-keygen -t {{ keyType }} -N '' -f /etc/ssh/ssh_host_{{ keyType }}_key
- creates: /etc/ssh/ssh_host_{{ keyType }}_key
- user: root
{% elif salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %}
ssh_host_{{ keyType }}_key: ssh_host_{{ keyType }}_key:
file.managed: file.managed:
- name: /etc/ssh/ssh_host_{{ keyType }}_key - name: /etc/ssh/ssh_host_{{ keyType }}_key