From f6a903229444e2351d3f8159b5e2645398c3e14b Mon Sep 17 00:00:00 2001 From: jaydee Date: Tue, 3 Mar 2026 22:39:38 +0100 Subject: [PATCH] build --- roles/ssh_banner/tasks/Debian.yml | 40 +++++++++++++++++++++++++++ roles/ssh_banner/tasks/Rocky.yml | 46 +++++++++++++++++++++++++++++++ 2 files changed, 86 insertions(+) create mode 100755 roles/ssh_banner/tasks/Debian.yml create mode 100755 roles/ssh_banner/tasks/Rocky.yml diff --git a/roles/ssh_banner/tasks/Debian.yml b/roles/ssh_banner/tasks/Debian.yml new file mode 100755 index 0000000..2f6e875 --- /dev/null +++ b/roles/ssh_banner/tasks/Debian.yml @@ -0,0 +1,40 @@ +- name: Set banner + become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}" + block: + - name: Install packages + ansible.builtin.apt: + name: + - figlet + - toilet + + - name: Create Banner + ansible.builtin.command: | + figlet -c {{ (inventory_hostname | split('.'))[0] }} -f slant + register: logo + changed_when: "logo.rc == 0" + + - name: Creating a file with content + ansible.builtin.copy: + dest: "/etc/motd" + content: | + {{ logo.stdout }} + owner: 0 + group: 0 + mode: "0777" + + - name: Reconfigure sshd + ansible.builtin.lineinfile: + path: /etc/ssh/sshd_config + regexp: "^Banner.* " + line: "#Banner /etc/banner" + + - name: Reconfigure sshd + ansible.builtin.lineinfile: + path: /etc/ssh/sshd_config + regexp: "^#PrintLastLog.* " + line: "PrintLastLog no" + + - name: Sshd + ansible.builtin.service: + name: ssh.service + state: restarted diff --git a/roles/ssh_banner/tasks/Rocky.yml b/roles/ssh_banner/tasks/Rocky.yml new file mode 100755 index 0000000..1c4924a --- /dev/null +++ b/roles/ssh_banner/tasks/Rocky.yml @@ -0,0 +1,46 @@ +- name: Set banner + become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}" + block: + - name: Ensure EPEL repository is installed + ansible.builtin.dnf: + name: epel-release + state: present + + - name: Install packages + ansible.builtin.dnf: + name: + - figlet + - toilet + + + - name: Create Banner + ansible.builtin.command: | + figlet -c {{ (inventory_hostname | split('.'))[0] }} -f slant + register: logo + changed_when: "logo.rc == 0" + + - name: Creating a file with content + ansible.builtin.copy: + dest: "/etc/motd" + content: | + {{ logo.stdout }} + owner: 0 + group: 0 + mode: "0777" + + - name: Reconfigure sshd + ansible.builtin.lineinfile: + path: /etc/ssh/sshd_config + regexp: "^Banner.* " + line: "#Banner /etc/banner" + + - name: Reconfigure sshd + ansible.builtin.lineinfile: + path: /etc/ssh/sshd_config + regexp: "^#PrintLastLog.* " + line: "PrintLastLog no" + + - name: Sshd + ansible.builtin.service: + name: ssh.service + state: restarted