sborenst
2017-10-16 b15b5f5dcd86c80a606a747a383ef924d2e56fa3
testing adding sshd configs
1 files modified
8 ■■■■■ changed files
ansible/configs/ans-tower-lab/files/cloud_providers/ec2_cloud_template.j2 8 ●●●●● patch | view | raw | blame | history
ansible/configs/ans-tower-lab/files/cloud_providers/ec2_cloud_template.j2
@@ -345,6 +345,14 @@
        },
        "InstanceType": "{{bastion_instance_type}}",
        "KeyName": "{{key_name}}",
        "UserData" : { "Fn::Base64" : { "Fn::Join" : ["", [
          "sed -i "2i ldap_group_nesting_level=0" /etc/sssd/sssd.conf \n",
          "systemctl restart sssd \n",
          "echo "PermitRootLogin without-password" >> /etc/ssh/sshd_config \n",
          "sed -i "s/^PasswordAuthentication yes/PasswordAuthentication no/" /etc/ssh/sshd_config \n",
          "sed -i "s/^ChallengeResponseAuthentication yes/ChallengeResponseAuthentication no/" /etc/ssh/sshd_config \n",
          "systemctl restart sshd \n"
          ]]}},
        "SecurityGroupIds": [
          {
            "Fn::GetAtt": [