user ssh configs
This commit is contained in:
38
ssh/init.sls
38
ssh/init.sls
@@ -1,4 +1,10 @@
|
||||
|
||||
/root/.ssh:
|
||||
file.directory:
|
||||
- user: root
|
||||
- group: root
|
||||
- mode: 700
|
||||
|
||||
/root/.ssh/authorized_keys:
|
||||
file.managed:
|
||||
- source: 'salt://ssh/files/authorized_keys.jinja'
|
||||
@@ -6,6 +12,8 @@
|
||||
- user: root
|
||||
- group: root
|
||||
- mode: 400
|
||||
- require:
|
||||
- file: /root/.ssh
|
||||
|
||||
/root/.ssh/config:
|
||||
file.managed:
|
||||
@@ -14,8 +22,35 @@
|
||||
- user: root
|
||||
- group: root
|
||||
- mode: 400
|
||||
- require:
|
||||
- file: /root/.ssh
|
||||
|
||||
{% for user in salt.pillar.get('authkey_users', []) | union(salt.pillar.get('ssh_config_users', [])) %}
|
||||
|
||||
/home/{{user}}/.ssh:
|
||||
file.directory:
|
||||
- user: {{user}}
|
||||
- group: {{user}}
|
||||
- mode: 700
|
||||
|
||||
{% endfor %}
|
||||
|
||||
{% for user in salt.pillar.get('ssh_config_users', []) %}
|
||||
|
||||
/home/{{user}}/.ssh/config:
|
||||
file.managed:
|
||||
- source: 'salt://ssh/files/ssh_config.jinja'
|
||||
- template: jinja
|
||||
- user: {{user}}
|
||||
- group: {{user}}
|
||||
- mode: 400
|
||||
- require:
|
||||
- file: /home/{{user}}/.ssh
|
||||
|
||||
{% endfor %}
|
||||
|
||||
{% for user in salt.pillar.get('authkey_users', []) %}
|
||||
|
||||
/home/{{user}}/.ssh/authorized_keys:
|
||||
file.managed:
|
||||
- source: 'salt://ssh/files/authorized_keys.jinja'
|
||||
@@ -23,4 +58,7 @@
|
||||
- user: {{user}}
|
||||
- group: {{user}}
|
||||
- mode: 400
|
||||
- require:
|
||||
- file: /home/{{user}}/.ssh
|
||||
|
||||
{% endfor %}
|
||||
|
||||
Reference in New Issue
Block a user