Skip to content
This repository was archived by the owner on Dec 26, 2020. It is now read-only.

Commit 18be974

Browse files
committed
remove crypto.yml
move include tasks to hardening.yml and remove intermediate crypto.yml Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
1 parent 5e47ffa commit 18be974

File tree

2 files changed

+16
-12
lines changed

2 files changed

+16
-12
lines changed

tasks/crypto.yml

Lines changed: 0 additions & 12 deletions
This file was deleted.

tasks/hardening.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,22 @@
2020
- name: include tasks to create crypo-vars
2121
include_tasks: crypto.yml
2222

23+
- name: set default for ssh_host_key_files if not supplied
24+
include_tasks: crypto_hostkeys.yml
25+
when: not ssh_host_key_files
26+
27+
- name: set default for ssh_macs if not supplied
28+
include_tasks: crypto_macs.yml
29+
when: not ssh_macs
30+
31+
- name: set default for ssh_ciphers if not supplied
32+
include_tasks: crypto_ciphers.yml
33+
when: not ssh_ciphers
34+
35+
- name: set default for ssh_kex if not supplied
36+
include_tasks: crypto_kex.yml
37+
when: not ssh_kex
38+
2339
- name: create revoked_keys and set permissions to root/600
2440
template:
2541
src: 'revoked_keys.j2'

0 commit comments

Comments
 (0)