From 7e6e7ef34ed70a50ef4d42ea8eaa2b27d2790e51 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Sun, 31 Jul 2022 16:56:57 +0300
Subject: ssh-dev: set sshd port

Sponsored-by: author
---
 ansible/hosts       |  1 +
 ansible/ssh-dev.yml | 32 ++++++++++++++++++++++++++++++++
 2 files changed, 33 insertions(+)
 create mode 100644 ansible/ssh-dev.yml

diff --git a/ansible/hosts b/ansible/hosts
index 57cb82f..96f74b5 100644
--- a/ansible/hosts
+++ b/ansible/hosts
@@ -37,6 +37,7 @@ roadmap-dev
 rust-dev
 sequoia-dev
 sequoia-web
+ssh-dev
 sshca-dev
 subplot-dev
 v-i-dev
diff --git a/ansible/ssh-dev.yml b/ansible/ssh-dev.yml
new file mode 100644
index 0000000..dd20b79
--- /dev/null
+++ b/ansible/ssh-dev.yml
@@ -0,0 +1,32 @@
+- hosts: ssh-dev
+  remote_user: debian
+  become: yes
+  roles:
+    - role: sane_debian_system
+    - role: unix_users
+  tasks:
+    - name: "Configure SSH server port"
+      when: sshd_port is defined
+      copy:
+        content: |
+          Port {{ sshd_port }}
+        dest: /etc/ssh/sshd_config.d/port.conf
+      notify: sshd_restart
+  handlers:
+    - name: sshd_restart
+      systemd:
+        name: ssh
+        state: restarted
+  vars:
+    ansible_python_interpreter: /usr/bin/python3
+
+    sane_debian_system_version: 2
+    sane_debian_system_hostname: "{{ inventory_hostname }}"
+    sane_debian_system_codename: bullseye
+    sane_debian_system_mirror: deb.debian.org
+
+    unix_users_version: 2
+    unix_users:
+      - username: liw
+
+    sshd_port: 22
-- 
cgit v1.2.1