rc/servers
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

debian: run a separate sshd in mgmt VRF

Browse source 
Leave the default sshd alone. If ssh is not necessary in default VRF,
another role should disable it.
This commit is contained in:
Timotej Lazar 2023-10-25 13:04:44 +02:00
parent c9479cc786
commit 5da50c14f9
4 changed files with 45 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/debian/files/sshd@mgmt.service Normal file
View file

@ -0,0 +1,16 @@
[Unit]
Description=OpenBSD Secure Shell server (management VRF)
After=network.target auditd.service
[Service]
ExecStartPre=/usr/sbin/sshd -t
ExecStart=ip vrf exec mgmt /usr/sbin/sshd -f /etc/ssh/sshd_config.mgmt
ExecReload=/usr/sbin/sshd -t
ExecReload=/bin/kill -HUP $MAINPID
KillMode=process
Restart=on-failure
RestartPreventExitStatus=255
Type=notify
[Install]
WantedBy=multi-user.target