20 lines
481 B
YAML
20 lines
481 B
YAML
---
|
|
- name: Configure SSH access
|
|
tags: [ssh]
|
|
become: true
|
|
block:
|
|
- name: Remove any PermitRootLogin instruction
|
|
lineinfile:
|
|
dest: /etc/ssh/sshd_config
|
|
regexp: "^PermitRootLogin"
|
|
state: absent
|
|
notify: restart ssh
|
|
|
|
- name: Disable SSH root login
|
|
lineinfile:
|
|
dest: /etc/ssh/sshd_config
|
|
regexp: "^PermitRootLogin"
|
|
line: "PermitRootLogin prohibit-password"
|
|
state: present
|
|
notify: restart ssh
|