ansible批量修改sshd_config

最新推荐文章于 2022-05-26 17:31:39 发布

weixin_33736649

最新推荐文章于 2022-05-26 17:31:39 发布

阅读量501

点赞数

CC 4.0 BY-SA版权

文章标签：运维

原文链接：https://yq.aliyun.com/articles/542573

---
- hosts: all

  gather_facts: true

  remote_user: root

  tasks:

  - name: "修改ssh配置文件的安全选项"

    lineinfile:

      path: /etc/ssh/sshd_config

      regexp: '{{ item.regexp }}'

      line: '{{ item.line }}'

      state: present

    with_items:

      - regexp: "^PasswordAuthentication"

        line: "PasswordAuthentication no"

      - regexp: "^#PermitRootLogin yes"

        line: "PermitRootLogin no"

      - regexp: "^#Port 22"

        line: "Port 2249"

      - regexp: "^GSSAPIAuthentication yes"

        line: "GSSAPIAuthentication no"

    notify:

      - restart sshd

  handlers:

    - name: restart sshd

      service:

        name: sshd

        state: restarted

本文转自激情燃烧的岁月博客51CTO博客，原文链接http://blog.51cto.com/liuzhengwei521/1966503如需转载请自行联系原作者