Add a task for optionally configuring the AllowUsers directive

2026-05-18 20:10:12 +04:00
parent c66e8daddf
commit e8376ee112
1 changed files with 9 additions and 0 deletions
--- a/roles/sshd/tasks/main.yml
+++ b/roles/sshd/tasks/main.yml
@@ -21,3 +21,12 @@
    regexp: '^#?LogLevel'
    line: 'LogLevel VERBOSE'
    validate: sshd -f %s -t
+
+- name: "Configure AllowUsers"
+  when: sshd_allow_users is defined
+  notify: Restart sshd
+  ansible.builtin.lineinfile:
+    path: /etc/ssh/sshd_config
+    regexp: '^#?\s*AllowUsers\s+'
+    line: "AllowUsers {{ sshd_allow_users }}"
+    validate: sshd -f %s -t