From 2118ab39f42014884a76daacca1f9968996ebe1f Mon Sep 17 00:00:00 2001 From: keiran Date: Fri, 29 Mar 2019 23:15:11 -0400 Subject: [PATCH] user ssh configs --- ssh/init.sls | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) diff --git a/ssh/init.sls b/ssh/init.sls index b53934a..0672d5b 100644 --- a/ssh/init.sls +++ b/ssh/init.sls @@ -1,4 +1,10 @@ +/root/.ssh: + file.directory: + - user: root + - group: root + - mode: 700 + /root/.ssh/authorized_keys: file.managed: - source: 'salt://ssh/files/authorized_keys.jinja' @@ -6,6 +12,8 @@ - user: root - group: root - mode: 400 + - require: + - file: /root/.ssh /root/.ssh/config: file.managed: @@ -14,8 +22,35 @@ - user: root - group: root - mode: 400 + - require: + - file: /root/.ssh + +{% for user in salt.pillar.get('authkey_users', []) | union(salt.pillar.get('ssh_config_users', [])) %} + +/home/{{user}}/.ssh: + file.directory: + - user: {{user}} + - group: {{user}} + - mode: 700 + +{% endfor %} + +{% for user in salt.pillar.get('ssh_config_users', []) %} + +/home/{{user}}/.ssh/config: + file.managed: + - source: 'salt://ssh/files/ssh_config.jinja' + - template: jinja + - user: {{user}} + - group: {{user}} + - mode: 400 + - require: + - file: /home/{{user}}/.ssh + +{% endfor %} {% for user in salt.pillar.get('authkey_users', []) %} + /home/{{user}}/.ssh/authorized_keys: file.managed: - source: 'salt://ssh/files/authorized_keys.jinja' @@ -23,4 +58,7 @@ - user: {{user}} - group: {{user}} - mode: 400 + - require: + - file: /home/{{user}}/.ssh + {% endfor %}