chore: clean up updateKey

This commit is contained in:
eneller
2025-09-06 15:09:22 +02:00
parent eb0c5417d8
commit 58a5941fdb
2 changed files with 36 additions and 6 deletions

27
.gitignore vendored Normal file
View File

@@ -0,0 +1,27 @@
# Created by https://www.toptal.com/developers/gitignore/api/ansible,visualstudiocode
# Edit at https://www.toptal.com/developers/gitignore?templates=ansible,visualstudiocode
### Ansible ###
*.retry
### VisualStudioCode ###
.vscode/*
!.vscode/settings.json
!.vscode/tasks.json
!.vscode/launch.json
!.vscode/extensions.json
!.vscode/*.code-snippets
# Local History for Visual Studio Code
.history/
# Built Visual Studio Code Extensions
*.vsix
### VisualStudioCode Patch ###
# Ignore all local history of files
.history
.ionide
# End of https://www.toptal.com/developers/gitignore/api/ansible,visualstudiocode

View File

@@ -1,26 +1,30 @@
---
# https://docs.ansible.com/ansible/latest/collections/ansible/posix/authorized_key_module.html#examples
- name: update ssh key and login permissions
- name: Update ssh key and login permissions
strategy: free # dont wait for other hosts when executing
hosts: oracleServer
vars_prompt:
- name: ssh_key_path
prompt: enter the path to the ssh key to add
private: false
- name: ssh_key_comment
prompt: enter the comment that should be saved in the authorized_keys file
private: false
tasks:
- name: Add ssh key
become: true
async: 120 # Maximum execution time
poll: 05 # polling interval in seconds
poll: 5 # polling interval in seconds
ansible.posix.authorized_key:
user: "{{ ansible_user_id }}"
exclusive: true
state: present
key: "{{ lookup('file', '{{ ssh_key_path }}') }}"
comment: "{{ ssh_key_comment }}"
- name: sshd configuration file update
blockinfile:
- name: Update sshd config
ansible.builtin.blockinfile:
path: /etc/ssh/sshd_config
insertbefore: BOF # Beginning of the file
marker: "# {mark} ANSIBLE MANAGED BLOCK BY LINUX-ADMIN"
@@ -33,7 +37,6 @@
validate: /usr/sbin/sshd -T -f %s
- name: Restart SSHD
service:
ansible.builtin.service:
name: sshd
state: restarted