0
0
ssh-key-rotation-role/defaults/main.yaml
2023-11-13 20:39:10 +08:00

36 lines
1.0 KiB
YAML

---
# defaults file for ssh-key-rotation
# Removes the existing public keys when set to yes
is_exclusive: yes
should_manage_dir: no
# The location to store the keys to. (warning it should not begin with /)
ssh_key_path: ".ssh/{{ group_names[0] }}-{{ansible_date_time.date}}"
# The location to where the authorized_keys file existing
authorized_keys_path: ".ssh/authorized_keys"
# Set key algorithm
ssh_key_algorithm: ed25519
# ssh_key_algorithm: rsa -b 2048
# The comment that accompanies the key
ssh_key_comment: "{{ group_names[0] }}-{{ansible_date_time.date}}"
# The user of the host keys are added to
ssh_host_user: user
# Set to true by default
generate_new_key: true
# ----------------------------------------------------------------------------------------------------
# Ask passphrase on prompt instead
# passphrase: 83g!8bfu5M5yy84x
# add this if you want to add connection key for your server
# ssh_connection_key: "some key"
# add this if you want to add deployment key for your server
# ssh_deployment_key: "deployment key"