summaryrefslogtreecommitdiff
path: root/puppet/modules
diff options
context:
space:
mode:
authorMicah Anderson <micah@leap.se>2014-05-27 19:45:00 -0400
committerMicah Anderson <micah@leap.se>2014-05-27 19:55:41 -0400
commit382d1cb4aea6e4a2e6fb101346e46bb8a01dbc10 (patch)
tree8b6e0be314aaee313943062d919ab0278893403d /puppet/modules
parent8116e736d3d89c0b58c2d98097d646dc8a7b06d3 (diff)
Add missing scope to top-level sshd class, passing necessary parameters
for configuration (#3108) Change-Id: I4f94a47d47a40bfc6835359e7781707f96e91db0
Diffstat (limited to 'puppet/modules')
-rw-r--r--puppet/modules/site_sshd/manifests/init.pp20
1 files changed, 16 insertions, 4 deletions
diff --git a/puppet/modules/site_sshd/manifests/init.pp b/puppet/modules/site_sshd/manifests/init.pp
index e81780ef..400c21ea 100644
--- a/puppet/modules/site_sshd/manifests/init.pp
+++ b/puppet/modules/site_sshd/manifests/init.pp
@@ -1,5 +1,5 @@
class site_sshd {
- $ssh = hiera_hash('ssh')
+ $ssh = hiera_hash('ssh')
$hosts = hiera('hosts', '')
##
@@ -24,9 +24,9 @@ class site_sshd {
content => template('site_sshd/ssh_known_hosts.erb');
'/etc/ssh/ssh_config':
- owner => root,
- group => root,
- mode => '0644',
+ owner => root,
+ group => root,
+ mode => '0644',
content => template('site_sshd/ssh_config.erb');
}
@@ -47,4 +47,16 @@ class site_sshd {
ensure => absent
}
}
+
+ ##
+ ## SSHD SERVER CONFIGURATION
+ ##
+ class { '::sshd':
+ manage_nagios => 'no',
+ ports => $ssh['port'],
+ use_pam => 'yes',
+ hardened_ssl => 'yes',
+ print_motd => 'no',
+ manage_client => false
+ }
}