Mercurial > code > home > repos > infra

annotate ssh.py @ 305:58d8e6072dcc

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
update syncthing
author drewp@bigasterisk.com
date Sat, 24 Aug 2024 15:06:51 -0700
parents 65e28d2e0cd8
children 5b88b38f2471
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
12
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
1 from pyinfra import host
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
2 from pyinfra.facts.server import LinuxDistribution
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
3 from pyinfra.operations import files, systemd
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
4
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
5
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
6 systemd.service(
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
7 service='ssh',
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
8 running=True,
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
9 enabled=True,
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
10 )
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
11
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
12 files.line(path='/etc/ssh/ssh_config', line="HashKnownHosts", replace="HashKnownHosts no")
15c5ce7c74b5 refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
diff changeset
13
289
65e28d2e0cd8 move static templates to files/ ; use inventory tags for selecting hosts+features ; other refactors
drewp@bigasterisk.com
parents: 278
diff changeset
14 if 'pi' not in host.groups:
98
3d4340fbb16c finish moving these lines from system.py
drewp@bigasterisk.com
parents: 12
diff changeset
15 files.line(path='/etc/ssh/sshd_config', line="^UseDNS\b", replace="UseDNS no")
237
ff8879eed64e enable plus
drewp@bigasterisk.com
parents: 98
diff changeset
16 # MAYBE plus needs this fix: adding ListenAddress 0.0.0.0 to /etc/ssh/sshd_config
98
3d4340fbb16c finish moving these lines from system.py
drewp@bigasterisk.com
parents: 12
diff changeset
17 systemd.service(service='sshd', reloaded=True)