Changeset 13849 for main

Timestamp:

24 Apr 2016, 15:05:32 (9 years ago)

Author:

uli

Message:

Use sshd restart as a handler.

This way sshd is only restarted if something really changed, sshd
config wise.

File:

• main/waeup-ansible/bootstrap.yml (modified) (5 diffs)

main/waeup-ansible/bootstrap.yml

@@ -17 +17 @@
     deploy_user: 'deploy'
     deploy_public_key: "{{ lookup('file', 'files/id-deploy.pub') }}"
+
+  handlers:
+    - name: "restart sshd"
+      service:
+        name="ssh"
+        enabled=yes
+        state=restarted
+
   tasks:
-
     - name: "bootstrap | create 'deploy' user"
       user:
@@ -44 +51 @@
         regexp='^HostKey /etc/ssh/ssh_host_dsa_key'
         state=present
+      notify: "restart sshd"
 
     - name: "bootstrap | disable ecdsa keys in sshd_config"
@@ -52 +60 @@
         regexp='^HostKey /etc/ssh/ssh_host_ecdsa_key'
         state=present
+      notify: "restart sshd"
 
     - name: "bootstrap | set key bits in sshd_config to 4096"
@@ -60 +69 @@
         regexp='^ServerKeyBits 1024'
         state=present
+      notify: "restart sshd"
 
     - name: "bootstrap | remove short moduli (<2048 bits) from /etc/ssh/moduli"
@@ -65 +75 @@
         dest=/etc/ssh/moduli
         regexp='^([0-9]+\s){4}(1[0-9]{3}\s)'
-
-    - name: "bootstrap | restart sshd"
-      service:
-        name="ssh"
-        enabled=yes
-        state=restarted
+      notify: "restart sshd"