---
- hosts: all
gather_facts: true
remote_user: root
tasks:
- name: "修改ssh配置文件的安全选项"
lineinfile:
path: /etc/ssh/sshd_config
regexp: ‘{{ item.regexp }}‘
line: ‘{{ item.line }}‘
state: present
with_items:
- regexp: "^PasswordAuthentication"
line: "PasswordAuthentication no"
- regexp: "^#PermitRootLogin yes"
line: "PermitRootLogin no"
- regexp: "^#Port 22"
line: "Port 2249"
- regexp: "^GSSAPIAuthentication yes"
line: "GSSAPIAuthentication no"
notify:
- restart sshd
handlers:
- name: restart sshd
service:
name: sshd
state: restarted本文出自 “激情燃烧的岁月” 博客，请务必保留此出处http://liuzhengwei521.blog.51cto.com/4855442/1966503
原文：http://liuzhengwei521.blog.51cto.com/4855442/1966503