Page MenuHomeDevCentral
Files F13143582

No OneTemporary
Actions

View Options

diff --git a/roles/core/sshd/files/sshd_config b/roles/core/sshd/files/sshd_config
new file mode 100644
index 0000000..27dee19
--- /dev/null
+++ b/roles/core/sshd/files/sshd_config
@@ -0,0 +1,32 @@
+# -------------------------------------------------------------
+# OpenSSH configuration
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2017-02-28
+# License: Trivial work, not eligible to copyright
+# Source file: roles/core/sshd/files/sshd_config
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
+# but this is overridden so installations will only check .ssh/authorized_keys
+AuthorizedKeysFile .ssh/authorized_keys
+
+# Nasqueron servers authentication should only occur through SSH keys
+# but PAM can offer extrea capabilities if needed like OTP.
+PasswordAuthentication no
+ChallengeResponseAuthentication no
+UsePAM yes
+
+# Misc options
+PrintMotd no
+AcceptEnv LANG LC_*
+
+# SFTP
+Subsystem sftp /usr/lib/openssh/sftp-server
diff --git a/roles/core/sshd/init.sls b/roles/core/sshd/init.sls
new file mode 100644
index 0000000..ccd2ef5
--- /dev/null
+++ b/roles/core/sshd/init.sls
@@ -0,0 +1,11 @@
+# -------------------------------------------------------------
+# Salt — OpenSSH configuration
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2017-02-28
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+/etc/ssh/sshd_config:
+ file.managed:
+ - source: salt://roles/core/sshd/files/sshd_config
diff --git a/top.sls b/top.sls
index d26cf6c..d7725b5 100644
--- a/top.sls
+++ b/top.sls
@@ -1,22 +1,23 @@
# -------------------------------------------------------------
# Salt configuration for Nasqueron servers
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
# Project: Nasqueron
# Created: 2016-04-10
# License: Trivial work, not eligible to copyright
# -------------------------------------------------------------
base:
'*':
- roles/core/rc
- roles/core/hostname
- roles/core/network
- roles/core/motd
- roles/core/rsyslog
+ - roles/core/sshd
'eglide':
- roles/shellserver/users
- roles/shellserver/userland-software
- roles/shellserver/eglide-website
- roles/shellserver/vhosts
- roles/shellserver/web-hosting
- roles/shellserver/odderon

File Metadata

Mime Type
text/x-diff
Expires
Fri, Nov 21, 16:42 (1 d, 12 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3188604
Default Alt Text
(2 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator