From 772e327a55685283eeeaf8deae3ba1663b0cd167 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Sat, 10 Sep 2022 09:28:15 +0300
Subject: sshd: make sure sshd_config includes sshd_config.d/*.conf

Sponsored-by: author
---
 roles/sshd/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'roles')

diff --git a/roles/sshd/tasks/main.yml b/roles/sshd/tasks/main.yml
index 3855e30..d5ce5c2 100644
--- a/roles/sshd/tasks/main.yml
+++ b/roles/sshd/tasks/main.yml
@@ -3,6 +3,12 @@
     [ "{{ sshd_version }}" = "1" ] || \
       (echo "Unexpected version {{ sshd_version }}" 1>&2; exit 1)
 
+- name: "Configure SSH server to read config files in sshd_config.d"
+  lineinfile:
+    path: /etc/ssh/sshd_config
+    regexp: "Include /etc/ssh/sshd_config.d"
+    line:   "Include /etc/ssh/sshd_config.d/*.conf"
+
 - name: "Set SSH host identity"
   when: sshd_host_key is defined and sshd_host_cert is defined
   copy:
-- 
cgit v1.2.1