From 89389734616704dfb2c3bc2bf5009e321df8fe56 Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Sat, 4 Apr 2020 21:19:05 +0100
Subject: [PATCH] Restrict (and create) .ssh directory

---
 tasks/security.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/tasks/security.yml b/tasks/security.yml
index 09eada1..57dfc5b 100644
--- a/tasks/security.yml
+++ b/tasks/security.yml
@@ -11,6 +11,14 @@
     - 'wireguard-arch'
     - 'wireguard-tools'
 
+- name: Create .ssh directory
+  file:
+    state: directory
+    path: "{{ home }}/.ssh"
+    owner: "{{ user }}"
+    mode: 0700
+    directory_mode: 0700
+
 - name: Install assh config
   copy:
     src: ./files/assh.yml