user ssh configs
This commit is contained in:
38
ssh/init.sls
38
ssh/init.sls
@@ -1,4 +1,10 @@
|
|||||||
|
|
||||||
|
/root/.ssh:
|
||||||
|
file.directory:
|
||||||
|
- user: root
|
||||||
|
- group: root
|
||||||
|
- mode: 700
|
||||||
|
|
||||||
/root/.ssh/authorized_keys:
|
/root/.ssh/authorized_keys:
|
||||||
file.managed:
|
file.managed:
|
||||||
- source: 'salt://ssh/files/authorized_keys.jinja'
|
- source: 'salt://ssh/files/authorized_keys.jinja'
|
||||||
@@ -6,6 +12,8 @@
|
|||||||
- user: root
|
- user: root
|
||||||
- group: root
|
- group: root
|
||||||
- mode: 400
|
- mode: 400
|
||||||
|
- require:
|
||||||
|
- file: /root/.ssh
|
||||||
|
|
||||||
/root/.ssh/config:
|
/root/.ssh/config:
|
||||||
file.managed:
|
file.managed:
|
||||||
@@ -14,8 +22,35 @@
|
|||||||
- user: root
|
- user: root
|
||||||
- group: root
|
- group: root
|
||||||
- mode: 400
|
- mode: 400
|
||||||
|
- require:
|
||||||
|
- file: /root/.ssh
|
||||||
|
|
||||||
|
{% for user in salt.pillar.get('authkey_users', []) | union(salt.pillar.get('ssh_config_users', [])) %}
|
||||||
|
|
||||||
|
/home/{{user}}/.ssh:
|
||||||
|
file.directory:
|
||||||
|
- user: {{user}}
|
||||||
|
- group: {{user}}
|
||||||
|
- mode: 700
|
||||||
|
|
||||||
|
{% endfor %}
|
||||||
|
|
||||||
|
{% for user in salt.pillar.get('ssh_config_users', []) %}
|
||||||
|
|
||||||
|
/home/{{user}}/.ssh/config:
|
||||||
|
file.managed:
|
||||||
|
- source: 'salt://ssh/files/ssh_config.jinja'
|
||||||
|
- template: jinja
|
||||||
|
- user: {{user}}
|
||||||
|
- group: {{user}}
|
||||||
|
- mode: 400
|
||||||
|
- require:
|
||||||
|
- file: /home/{{user}}/.ssh
|
||||||
|
|
||||||
|
{% endfor %}
|
||||||
|
|
||||||
{% for user in salt.pillar.get('authkey_users', []) %}
|
{% for user in salt.pillar.get('authkey_users', []) %}
|
||||||
|
|
||||||
/home/{{user}}/.ssh/authorized_keys:
|
/home/{{user}}/.ssh/authorized_keys:
|
||||||
file.managed:
|
file.managed:
|
||||||
- source: 'salt://ssh/files/authorized_keys.jinja'
|
- source: 'salt://ssh/files/authorized_keys.jinja'
|
||||||
@@ -23,4 +58,7 @@
|
|||||||
- user: {{user}}
|
- user: {{user}}
|
||||||
- group: {{user}}
|
- group: {{user}}
|
||||||
- mode: 400
|
- mode: 400
|
||||||
|
- require:
|
||||||
|
- file: /home/{{user}}/.ssh
|
||||||
|
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
|
|||||||
Reference in New Issue
Block a user