21 lines
500 B
YAML
21 lines
500 B
YAML
- name: Check if SSH daemon is active
|
|
systemd:
|
|
name: sshd
|
|
state: started
|
|
register: sshd_status
|
|
|
|
- block:
|
|
- name: Disable SSH password auth
|
|
lineinfile:
|
|
dest: /etc/ssh/sshd_config
|
|
regexp: '^PasswordAuthentication\s*yes'
|
|
line: "PasswordAuthentication no"
|
|
register: sshd_config
|
|
|
|
- name: Restart SSH daemon
|
|
service:
|
|
name: sshd
|
|
state: restarted
|
|
when: sshd_config.changed
|
|
when: sshd_status.status.ActiveState == 'active'
|