summaryrefslogtreecommitdiff
path: root/ansible/irc.liw.fi.yml
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2023-09-18 06:36:36 +0300
committerLars Wirzenius <liw@liw.fi>2023-09-18 06:36:36 +0300
commit789f8349d63c6e94d6013c400f52f415f992b780 (patch)
tree32adf4fa99cec40d793674bc43aed65e7303e29e /ansible/irc.liw.fi.yml
parent9aceeff0407cd60dca0acb8d3bbeb910e642cb0c (diff)
downloadansibleness-789f8349d63c6e94d6013c400f52f415f992b780.tar.gz
refactor: use sshd_* vars from all group, when possible
Sponsored-by: author
Diffstat (limited to 'ansible/irc.liw.fi.yml')
-rw-r--r--ansible/irc.liw.fi.yml4
1 files changed, 4 insertions, 0 deletions
diff --git a/ansible/irc.liw.fi.yml b/ansible/irc.liw.fi.yml
index 19abdab..3e094c3 100644
--- a/ansible/irc.liw.fi.yml
+++ b/ansible/irc.liw.fi.yml
@@ -29,6 +29,10 @@
authorized_keys: |
{{ liw_personal_ssh_pub }}
+ # We must define the sshd variables here. The defaults from the
+ # "all" group assume sshca knows the host by the
+ # sane_debian_system_hostname name, which isn't true for this
+ # host.
sshd_version: 1
sshd_host_key: "{{ lookup('pipe', 'sshca host private-key irc.liw.fi') }}"
sshd_host_cert: "{{ lookup('pipe', 'sshca host certify --ca liw.fi/ca/host/v5 irc.liw.fi') }}"