systems/infrastructure
1
Fork 0
Code Issues 1 Pull Requests 14 Actions Activity

Remove expose_ssh and support SSH listening on nebula and PVE

Browse Source 
No more wireguard SSH for me
This commit is contained in:
Jake Howard 2021-03-24 22:19:29 +00:00
parent e80bcb5a8b
commit e67e4565d3
Signed by: jake
GPG Key ID: 57AFB45680EDD477
8 changed files with 1 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/host_vars/deluge.yml
View File

@ -1 +0,0 @@
expose_ssh: true

2
ansible/host_vars/forrest.yml
View File

@ -1,3 +1 @@
expose_ssh: true
protected_ip: "{{ pve_hosts.forrest.internal_ip }}"

1
ansible/host_vars/ingress.yml
View File

@ -1 +0,0 @@
expose_ssh: true

1
ansible/host_vars/jellyfin.yml
View File

@ -1 +0,0 @@
expose_ssh: true

2
ansible/host_vars/pve-docker.yml
View File

@ -1,5 +1,3 @@
expose_ssh: true
private_ip: "{{ pve_hosts.pve_docker.ip }}"
protected_ip: "{{ pve_hosts.pve_docker.internal_ip }}"

2
ansible/host_vars/pve.yml
View File

@ -1,5 +1,3 @@
expose_ssh: true
private_ip: "{{ pve_hosts.pve.ip }}"
protected_ip: "{{ pve_hosts.pve.internal_ip }}"

1
ansible/roles/base/defaults/main.yml
View File

@ -1 +0,0 @@
expose_ssh: false

6
ansible/roles/base/files/sshd_config
View File

@ -2,11 +2,7 @@
# Change to a high/odd port if this server is exposed to the internet directly
Port {{ ssh_port }}
{% if expose_ssh %}
AllowUsers {{ user }}
{% else %}
AllowUsers {{ user }}@{{ wireguard.cidr }}
{% endif %}
AllowUsers {% if ansible_hostname in pve_hosts %}{{ user }}@{{ pve_hosts.internal_cidr }}{% endif %} {% if ansible_hostname in nebula.clients %}{{ user }}@{{ nebula.cidr }}{% endif %}
# Bind to all interfaces (change to specific interface if needed)
ListenAddress 0.0.0.0