Changeset 13851 for main/waeup-ansible

Timestamp:

25 Apr 2016, 21:44:31 (8 years ago)

Author:

uli

Message:

Merge two host-key tasks into one.

File:

• main/waeup-ansible/bootstrap.yml (modified) (1 diff)

main/waeup-ansible/bootstrap.yml

@@ -44 +44 @@
         state=present
 
-    - name: "bootstrap | sshd_config - disable dsa keys"
+    - name: "bootstrap | sshd_config - disable weak keys"
       lineinfile:
         dest=/etc/ssh/sshd_config
         backrefs=yes
-        line='# HostKey /etc/ssh/ssh_host_dsa_key'
-        regexp='^HostKey /etc/ssh/ssh_host_dsa_key'
-        state=present
-      notify: "restart sshd"
-
-    - name: "bootstrap | sshd_config - disable ecdsa keys"
-      lineinfile:
-        dest=/etc/ssh/sshd_config
-        backrefs=yes
-        line='# HostKey /etc/ssh/ssh_host_ecdsa_key'
-        regexp='^HostKey /etc/ssh/ssh_host_ecdsa_key'
-        state=present
+        line={{ item.line }}
+        regexp={{ item.regexp }}
+      with_items:
+        - { regexp: '^HostKey /etc/ssh/ssh_host_dsa_key', line: '# HostKey /etc/ssh/ssh_host_dsa_key' }
+        - { regexp: '^HostKey /etc/ssh/ssh_host_ecdsa_key', line: '# HostKey /etc/ssh/ssh_host_ecdsa_key' }
       notify: "restart sshd"