111 lines
2.7 KiB
Django/Jinja
111 lines
2.7 KiB
Django/Jinja
{## Start with defaults from defaults.yaml ##}
|
|
{% import_yaml "openssh/defaults.yaml" as default_settings %}
|
|
|
|
{##
|
|
Setup variable using grains['os_family'] based logic, only add key:values here
|
|
that differ from whats in defaults.yaml
|
|
##}
|
|
{% set os_family_map = salt['grains.filter_by']({
|
|
'Arch': {
|
|
'server': 'openssh',
|
|
'client': 'openssh',
|
|
'service': 'sshd',
|
|
'dig_pkg': 'bind-tools',
|
|
},
|
|
'Debian': {
|
|
'server': 'openssh-server',
|
|
'client': 'openssh-client',
|
|
'service': 'ssh',
|
|
},
|
|
'FreeBSD': {
|
|
'service': 'sshd',
|
|
'dig_pkg': 'bind-tools',
|
|
'sshd_config_group': 'wheel',
|
|
'ssh_config_group': 'wheel',
|
|
},
|
|
'OpenBSD': {
|
|
'service': 'sshd',
|
|
'sshd_config_group': 'wheel',
|
|
'ssh_config_group': 'wheel',
|
|
},
|
|
'Gentoo': {
|
|
'server': 'net-misc/openssh',
|
|
'client': 'net-misc/openssh',
|
|
'service': 'sshd',
|
|
'dig_pkg': 'net-dns/bind-tools',
|
|
},
|
|
'RedHat': {
|
|
'server': 'openssh-server',
|
|
'client': 'openssh-clients',
|
|
'service': 'sshd',
|
|
'dig_pkg': 'bind-utils',
|
|
},
|
|
'Suse': {
|
|
'server': 'openssh',
|
|
'client': 'openssh',
|
|
'service': 'sshd',
|
|
'dig_pkg': 'bind-utils',
|
|
},
|
|
}
|
|
, grain="os_family"
|
|
, merge=salt['pillar.get']('openssh:lookup'))
|
|
%}
|
|
|
|
{## Merge the flavor_map to the default settings ##}
|
|
{% do default_settings.openssh.update(os_family_map) %}
|
|
|
|
{## Merge in openssh:lookup pillar ##}
|
|
{% set openssh = salt['pillar.get'](
|
|
'openssh',
|
|
default=default_settings.openssh,
|
|
merge=True
|
|
)
|
|
%}
|
|
|
|
{% set os_family_map = salt['grains.filter_by']({
|
|
'FreeBSD': {
|
|
'Subsystem': 'sftp /usr/libexec/sftp-server',
|
|
},
|
|
'OpenBSD': {
|
|
'Subsystem': 'sftp /usr/libexec/sftp-server',
|
|
},
|
|
'Suse': {
|
|
'Subsystem': 'sftp /usr/lib/ssh/sftp-server',
|
|
},
|
|
'Arch': {
|
|
'Subsystem': 'sftp /usr/lib/ssh/sftp-server',
|
|
},
|
|
'Debian': {
|
|
'Subsystem': 'sftp /usr/lib/openssh/sftp-server',
|
|
},
|
|
'RedHat': {
|
|
'Subsystem': 'sftp /usr/libexec/openssh/sftp-server',
|
|
},
|
|
'default': {}
|
|
}
|
|
, grain="os_family"
|
|
, merge=salt['pillar.get']('sshd_config:lookup'))
|
|
%}
|
|
|
|
{% set os_finger_map = salt['grains.filter_by']({
|
|
'CentOS-6': {
|
|
},
|
|
'default': {}
|
|
}
|
|
, grain="osfinger"
|
|
, merge=salt['pillar.get']('sshd_config:lookup'))
|
|
%}
|
|
|
|
|
|
{## Merge the flavor_map to the default settings ##}
|
|
{% do default_settings.sshd_config.update(os_family_map) %}
|
|
{% do default_settings.sshd_config.update(os_finger_map) %}
|
|
|
|
{## Merge in sshd_config:lookup pillar ##}
|
|
{% set sshd_config = salt['pillar.get'](
|
|
'sshd_config',
|
|
default=default_settings.sshd_config,
|
|
merge=True
|
|
)
|
|
%}
|