add sshd role

2025-12-18 11:39:09 +03:00
parent 23d0618c02
commit 30945d5a2f
11 changed files with 207 additions and 0 deletions
--- a/roles/sshd/tasks/encryption.yml
+++ b/roles/sshd/tasks/encryption.yml
@@ -0,0 +1,11 @@
+---
+- name: "Encryption | remove unsafe host keys"
+  loop:
+    - /etc/ssh/ssh_host_ecdsa_key
+    - /etc/ssh/ssh_host_ecdsa_key.pub
+    - /etc/ssh/ssh_host_dsa_key
+    - /etc/ssh/ssh_host_dsa_key.pub
+  notify: Restart sshd
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: absent