diff --git a/roles/sftpuser/defaults/main.yml b/roles/sftpuser/defaults/main.yml deleted file mode 100644 index 0634078..0000000 --- a/roles/sftpuser/defaults/main.yml +++ /dev/null @@ -1,2 +0,0 @@ ---- -sftpuser_chroot: /srv/backup diff --git a/roles/sftpuser/meta/main.yml b/roles/sftpuser/meta/main.yml deleted file mode 100644 index bc03e65..0000000 --- a/roles/sftpuser/meta/main.yml +++ /dev/null @@ -1,3 +0,0 @@ ---- -dependencies: - - {role: sshd} diff --git a/roles/sftpuser/tasks/main.yml b/roles/sftpuser/tasks/main.yml deleted file mode 100644 index e6ef7ab..0000000 --- a/roles/sftpuser/tasks/main.yml +++ /dev/null @@ -1,35 +0,0 @@ ---- -- name: Create group - ansible.builtin.group: - name: backup - system: true - -- name: Create user - ansible.builtin.user: - name: backup - comment: Service backup - createhome: false - group: backup - home: /var/empty - shell: /sbin/nologin - system: true - -- name: Create authorized_keys - ansible.builtin.copy: - dest: /etc/ssh/authorized_keys.backup - src: ../files/ssh/backup.pub - mode: "0640" - owner: root - group: backup - -- name: Configure sshd chroot - ansible.builtin.blockinfile: - path: /etc/ssh/sshd_config - block: | - Match User backup - ChrootDirectory {{ sftpuser_chroot }} - ForceCommand internal-sftp - AuthorizedKeysFile /etc/ssh/authorized_keys.backup - marker: "# {mark} ANSIBLE MANAGED BLOCK (user backup)" - validate: "sshd -t -f %s" - notify: Restart sshd