2017-02-16 03:41:30 +08:00
|
|
|
---
|
2017-02-18 03:24:14 +08:00
|
|
|
# defaults file for ssh-key-rotation
|
2023-11-07 21:39:17 +08:00
|
|
|
|
|
|
|
# Removes the existing public keys when set to yes
|
|
|
|
is_exclusive: yes
|
2017-02-16 03:41:30 +08:00
|
|
|
should_manage_dir: no
|
2017-02-16 04:02:00 +08:00
|
|
|
|
2023-11-07 21:39:17 +08:00
|
|
|
# The location to store the keys to. (warning it should not begin with /)
|
|
|
|
ssh_key_path: ".ssh/{{ group_names[0] }}-{{ansible_date_time.date}}"
|
|
|
|
|
|
|
|
# The location to where the authorized_keys file existing
|
|
|
|
authorized_keys_path: ".ssh/authorized_keys"
|
|
|
|
|
|
|
|
# Set key algorithm
|
|
|
|
ssh_key_algorithm: ed25519
|
|
|
|
# ssh_key_algorithm: rsa -b 2048
|
|
|
|
|
|
|
|
# The comment that accompanies the key
|
|
|
|
ssh_key_comment: "{{ group_names[0] }}-{{ansible_date_time.date}}"
|
|
|
|
|
|
|
|
# The user of the host keys are added to
|
|
|
|
ssh_host_user: user
|
|
|
|
|
|
|
|
# Set to true by default
|
|
|
|
generate_new_key: true
|
|
|
|
|
|
|
|
# ----------------------------------------------------------------------------------------------------
|
|
|
|
|
|
|
|
# Ask passphrase on prompt instead
|
|
|
|
# passphrase: 83g!8bfu5M5yy84x
|
|
|
|
|
|
|
|
# add this if you want to add connection key for your server
|
|
|
|
# ssh_connection_key: "some key"
|
|
|
|
|
|
|
|
# add this if you want to add deployment key for your server
|
|
|
|
# ssh_deployment_key: "deployment key"
|