Imran Iqbal
7e35335613
fix(config.sls): fix `salt-lint` errors
```bash
Examining openssh/config.sls of type state
[210] Numbers that start with `0` should always be encapsulated in quotation marks
openssh/config.sls:103
- mode: 0600
```
5 anos atrás
Imran Iqbal
f6dbca3352
fix: complete PR #164
* Use consistent Jinja whitespace control `{%- ... -}`
* Improve debug output (comments & whitespace control)
* Use exact state names with TOFS `files_switch`
* Add `ssh_known_hosts_src` to `defaults` (for consistency)
* Restrict `pillar.example` changes to TOFS only
* Use `fire_banner` in `pillar.example` to indicate available template
5 anos atrás
nb
a47596f15a
feat(TOFS): ssh sshd configs known_host and banner
5 anos atrás
chenmen
463ad69d92
reuse sshd_config from map ( #160 )
remove duplicated 'pillar.get' calls to retrieve the sshd_config and ssh_config pillars.
5 anos atrás
Alexander Weidinger
4b84dead8e
Made host key algos configurable; dropped DSA
5 anos atrás
Peter Hudec
ea755686e3
updated openssh/config.sls
6 anos atrás
tmeneau
63ad14efb1
Fix invalid require_in sshd_config for key states
Change the require_ins used by the key management states in the
config.sls to be conditional based on whether the sshd_config
is managed by the formula
Fixes #130
6 anos atrás
Raphaël Hertzog
6ccb9fc87d
Replace deprecated "user" attribute by "runas"
6 anos atrás
Andres Montalban
26f2fc8e97
[FIX] When key is present override generating by any way
7 anos atrás
Alexander Weidinger
7afea021c6
Fixed key generation
- generate before running check_mk on the sshd_config
- set permissions on private key
- cope with empty keys
7 anos atrás
Andres Montalban
c7a97ae72f
Create needed directory for UsePrivilegeSeparation option
7 anos atrás
Alexander Weidinger
c71f2ae4fa
minor fix: use keyFile in config.sls
7 anos atrás
Alexander Weidinger
162705c7ce
Test config before applying it
7 anos atrás
Alexander Weidinger
6b23b28f52
Opt-in to enforce RSA key length
7 anos atrás
ek9
038a51cdc8
manage sshd_config and ssh_config only if pillars are defined
7 anos atrás
Adam Mendlik
613bea2cac
Add variables for file owner and mode
7 anos atrás
Bogdan Radulescu
13cf374efe
Added configuration options for ssh_config
Made a small change to reflect the default sshd_config
9 anos atrás
elfixit
18ba94d0fc
add options to give a key size to generate_key
9 anos atrás
Niels Abspoel
2a68ccac1a
Add option to remove ssh_host_keys
9 anos atrás
Franz Pletz
5d0f69ad2c
Cleanups for host key pillar example
10 anos atrás
Franz Pletz
33f21a0976
Add support for ED25519 host keys
10 anos atrás
Alan Pearce
6fb57f40bc
Config: Add support for generating keys
10 anos atrás
Alan Pearce
73eaef4ea0
Config: Add support for ECDSA host keys
10 anos atrás
Alan Pearce
ce46343562
Config: Refactor host key provisioning into loop
10 anos atrás
Alan Pearce
2876a691b0
Remove reference to root group
By not specifying it, root user's group should be used.
10 anos atrás
Seth House
b44c26cd13
Moved the rsa/dsa key management to config.sls
10 anos atrás
Kenny Do
9f70270643
explicitly set the user, group, and mode to match the package's
sshd_config
11 anos atrás
Kenny Do
dc53d0c295
fixed the name of the service that the openssh config is watched by
11 anos atrás
Kenny Do
07771c0ebf
Split the sshd_config and banner components into sub-states
11 anos atrás