From 0029263b6f7dc06e7f74985dd875add573b9c553 Mon Sep 17 00:00:00 2001 From: Lars Wirzenius Date: Sat, 10 Sep 2022 09:50:50 +0300 Subject: http.liw.fi: set SSH host certificate Sponsored-by: author --- ansible/http.liw.fi.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ansible/http.liw.fi.yml b/ansible/http.liw.fi.yml index dde7574..ed409ff 100644 --- a/ansible/http.liw.fi.yml +++ b/ansible/http.liw.fi.yml @@ -2,6 +2,7 @@ remote_user: root roles: - role: sane_debian_system + - role: sshd - role: unix_users - role: apache_server - role: comfortable-debian-system @@ -282,3 +283,8 @@ owner: liw ownermail: liw@liw.fi letsencrypt: no + + sshd_version: 1 + sshd_host_key: "{{ lookup('pipe', 'sshca host private-key http.liw.fi') }}" + sshd_host_cert: "{{ lookup('pipe', 'sshca host certify liw.fi/ca/host/v4 http.liw.fi') }}" + sshd_user_ca_pub: "{{ lookup('pipe', 'sshca ca public-key liw.fi/ca/user/v3') }}" -- cgit v1.2.1