39 lines
1.0 KiB
YAML
39 lines
1.0 KiB
YAML
---
|
|
- name: Create SFTP user - {{ sftp_username }}
|
|
ansible.builtin.user:
|
|
name: "{{ sftp_username }}"
|
|
state: present
|
|
create_home: true
|
|
shell: /sbin/nologin
|
|
|
|
- name: Create SFTP user upload directory - {{ sftp_username }}
|
|
ansible.builtin.file:
|
|
state: directory
|
|
path: "{{ sftp_root }}/{{ sftp_username }}-uploads/"
|
|
mode: '0755'
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Create transfers directory - {{ sftp_username }}
|
|
ansible.builtin.file:
|
|
state: directory
|
|
path: "{{ sftp_root }}/{{ sftp_username }}-uploads/transfers/"
|
|
mode: '2770'
|
|
owner: "{{ sftp_username }}"
|
|
group: "{{ sftp_transfers_groupname }}"
|
|
|
|
- name: Push sshd config - {{ sftp_username }}
|
|
ansible.builtin.template:
|
|
src: sshd_config.conf.j2
|
|
dest: "/etc/ssh/sshd_config.d/60-sftp-jail-{{ sftp_username }}.conf"
|
|
mode: '0600'
|
|
owner: "root"
|
|
group: "root"
|
|
notify: Restart sshd
|
|
|
|
- name: Push public ssh key - {{ sftp_username }}
|
|
ansible.posix.authorized_key:
|
|
user: "{{ sftp_username }}"
|
|
key: "{{ sftp_pubkey }}"
|
|
state: present
|