2023-07-17 14:37:45 +00:00
|
|
|
# We could probably avoid rebooting in some cases, but those should never happen
|
|
|
|
|
# in normal operation anyway. This way all setup is done before rebooting once.
|
|
|
|
|
|
2023-10-18 13:01:02 +00:00
|
|
|
- name: Set up management interfaces
|
2023-07-17 14:37:45 +00:00
|
|
|
template:
|
2023-10-18 13:01:02 +00:00
|
|
|
dest: /etc/network/interfaces.d/mgmt.intf
|
|
|
|
|
src: mgmt.intf.j2
|
2023-07-17 14:37:45 +00:00
|
|
|
mode: 0644
|
|
|
|
|
notify: reboot
|
|
|
|
|
|
|
|
|
|
- name: Configure SSH instance in management VRF
|
|
|
|
|
template:
|
|
|
|
|
dest: /etc/ssh/sshd_config.mgmt
|
|
|
|
|
src: sshd_config.mgmt.j2
|
|
|
|
|
mode: 0644
|
|
|
|
|
notify: reboot
|
|
|
|
|
|
|
|
|
|
- name: Set up a SSH instance in management VRF
|
|
|
|
|
copy:
|
|
|
|
|
dest: /etc/systemd/system/
|
|
|
|
|
src: sshd@mgmt.service
|
|
|
|
|
mode: 0644
|
|
|
|
|
notify: reboot
|
|
|
|
|
|
|
|
|
|
- name: Enable management SSH
|
|
|
|
|
service:
|
|
|
|
|
name: sshd@mgmt
|
|
|
|
|
enabled: yes
|
|
|
|
|
notify: reboot
|
|
|
|
|
|
|
|
|
|
- meta: flush_handlers
|
