Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove expose_ssh and support SSH listening on nebula and PVE

Browse Source 
No more wireguard SSH for me
This commit is contained in:
Jake Howard
2021-03-24 22:19:29 +00:00
parent e80bcb5a8b
commit e67e4565d3
8 changed files with 1 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ansible/roles/base/files/sshd_config
View File

@ -2,11 +2,7 @@
# Change to a high/odd port if this server is exposed to the internet directly
Port {{ ssh_port }}
{% if expose_ssh %}
AllowUsers {{ user }}
{% else %}
AllowUsers {{ user }}@{{ wireguard.cidr }}
{% endif %}
AllowUsers {% if ansible_hostname in pve_hosts %}{{ user }}@{{ pve_hosts.internal_cidr }}{% endif %} {% if ansible_hostname in nebula.clients %}{{ user }}@{{ nebula.cidr }}{% endif %}
# Bind to all interfaces (change to specific interface if needed)
ListenAddress 0.0.0.0