Config: Add support for generating keys
This commit is contained in:
parent
73eaef4ea0
commit
6fb57f40bc
@ -14,7 +14,14 @@ sshd_config:
|
|||||||
- service: openssh
|
- service: openssh
|
||||||
|
|
||||||
{% for keyType in ['ecdsa', 'dsa', 'rsa'] %}
|
{% for keyType in ['ecdsa', 'dsa', 'rsa'] %}
|
||||||
{% if salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %}
|
{% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %}
|
||||||
|
ssh_generate_host_{{ keyType }}_key:
|
||||||
|
cmd.run:
|
||||||
|
- name: ssh-keygen -t {{ keyType }} -N '' -f /etc/ssh/ssh_host_{{ keyType }}_key
|
||||||
|
- creates: /etc/ssh/ssh_host_{{ keyType }}_key
|
||||||
|
- user: root
|
||||||
|
|
||||||
|
{% elif salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %}
|
||||||
ssh_host_{{ keyType }}_key:
|
ssh_host_{{ keyType }}_key:
|
||||||
file.managed:
|
file.managed:
|
||||||
- name: /etc/ssh/ssh_host_{{ keyType }}_key
|
- name: /etc/ssh/ssh_host_{{ keyType }}_key
|
||||||
|
Loading…
Reference in New Issue
Block a user