simplifying openssh-server configuration and relying more on upstream defaults

2017-09-05 17:16:57 +02:00
parent 63fbafde7f
commit ff2e6fc873
3 changed files with 26 additions and 83 deletions
--- a/tasks/openssh.yml
+++ b/tasks/openssh.yml
@@ -7,7 +7,13 @@
  service: name=ssh state=started enabled=yes

 - name: openssh - config
-  template: dest=/etc/ssh/sshd_config src=sshd_config.j2 owner=root group=root mode=0600
+  template:
+      dest: /etc/ssh/sshd_config
+      src: sshd_config.j2
+      owner: root
+      group: root
+      mode: 0600
+      validate: '/usr/sbin/sshd -T -f %s'
  notify: reload openssh

 - name: openssh - root keys