summaryrefslogtreecommitdiff
path: root/ansible/http.liw.fi.yml
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2023-09-18 06:56:55 +0300
committerLars Wirzenius <liw@liw.fi>2023-09-18 06:56:55 +0300
commit3d9ad7ece30b701515ebe869b0b7372c0c93ceb7 (patch)
tree7b854a89c20249cd83c5d25cba7c855c95bc98d9 /ansible/http.liw.fi.yml
parent373ff634e83dfd131fe2c47106da15be82d597c6 (diff)
downloadansibleness-3d9ad7ece30b701515ebe869b0b7372c0c93ceb7.tar.gz
more use of default sshd_ variables
Sponsored-by: author
Diffstat (limited to 'ansible/http.liw.fi.yml')
-rw-r--r--ansible/http.liw.fi.yml4
1 files changed, 4 insertions, 0 deletions
diff --git a/ansible/http.liw.fi.yml b/ansible/http.liw.fi.yml
index b48d536..598537b 100644
--- a/ansible/http.liw.fi.yml
+++ b/ansible/http.liw.fi.yml
@@ -290,6 +290,10 @@
ownermail: liw@liw.fi
letsencrypt: no
+ # We must define the sshd variables here. The defaults from the
+ # "all" group assume sshca knows the host by the
+ # sane_debian_system_hostname name, which isn't true for this
+ # host.
sshd_version: 1
sshd_host_key: "{{ lookup('pipe', 'sshca host private-key http.liw.fi') }}"
sshd_host_cert: "{{ lookup('pipe', 'sshca host certify --ca liw.fi/ca/host/v5 http.liw.fi') }}"