Обновить playbooks/change_ssh_port_win.yml
This commit is contained in:
40
playbooks/change_ssh_port_win.yml
Normal file
40
playbooks/change_ssh_port_win.yml
Normal file
@@ -0,0 +1,40 @@
|
||||
---
|
||||
- name: Change SSH Port on Windows
|
||||
hosts: windows
|
||||
gather_facts: no
|
||||
|
||||
# ДОБАВИТЬ ЭТОТ БЛОК:
|
||||
collections:
|
||||
- ansible.windows
|
||||
- community.windows
|
||||
|
||||
vars:
|
||||
new_ssh_port: 22233
|
||||
sshd_config_path: 'C:\ProgramData\ssh\sshd_config'
|
||||
|
||||
tasks:
|
||||
- name: Allow new SSH port in Windows Firewall
|
||||
# Теперь можно писать короче, так как коллекции подключили выше
|
||||
win_firewall_rule:
|
||||
name: "OpenSSH-Server-Custom-Port"
|
||||
localport: "{{ new_ssh_port }}"
|
||||
action: allow
|
||||
direction: in
|
||||
protocol: tcp
|
||||
profiles: domain,private,public
|
||||
state: present
|
||||
enabled: yes
|
||||
|
||||
- name: Update Port in sshd_config
|
||||
win_lineinfile:
|
||||
path: "{{ sshd_config_path }}"
|
||||
regexp: '^#?Port\s+\d+'
|
||||
line: "Port {{ new_ssh_port }}"
|
||||
state: present
|
||||
notify: Restart Windows SSH
|
||||
|
||||
handlers:
|
||||
- name: Restart Windows SSH
|
||||
win_service:
|
||||
name: sshd
|
||||
state: restarted
|
||||
Reference in New Issue
Block a user