playbook: Add sshd-tweaks role, disable reverse DNS resolution

3a2162d0 · Guillaume Hervier · 57c90ac6 · 3a2162d0 · 3a2162d0
Commit 3a2162d0 authored Jul 20, 2018 by Guillaume Hervier
Showing with 20 additions and 0 deletions

playbook/roles/sshd-tweaks/handlers/main.yml playbook/roles/sshd-tweaks/handlers/main.yml +10 -0

playbook/roles/sshd-tweaks/tasks/main.yml playbook/roles/sshd-tweaks/tasks/main.yml +10 -0

No files found.
--- a/playbook/roles/sshd-tweaks/handlers/main.yml
+++ b/playbook/roles/sshd-tweaks/handlers/main.yml
+---
+- name: reload sshd
+  service:
+    name: sshd
+    state: reloaded
+
+- name: restart sshd
+  service:
+    name: sshd
+    state: restarted
--- a/playbook/roles/sshd-tweaks/tasks/main.yml
+++ b/playbook/roles/sshd-tweaks/tasks/main.yml
+---
+- name: Disable reverse name resolution for SSH
+  lineinfile:
+    dest: /etc/ssh/sshd_config
+    regexp: "^UseDNS"
+    line: "UseDNS no"
+    insertafter: EOF
+    state: present
+  notify:
+    - reload sshd