From 13ae26129584f3004306d323657f47c00e80fa9c Mon Sep 17 00:00:00 2001 From: Mateusz Mojsiejuk Date: Thu, 27 Nov 2025 22:53:09 +0100 Subject: [PATCH] Fix indentation in hosts file --- roles/set-hostname/tasks/main.yml | 3 +-- roles/ssh-hardening/tasks/main.yml | 4 ++-- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/roles/set-hostname/tasks/main.yml b/roles/set-hostname/tasks/main.yml index 7b54101..5a403dd 100644 --- a/roles/set-hostname/tasks/main.yml +++ b/roles/set-hostname/tasks/main.yml @@ -1,5 +1,4 @@ --- - - name: Set hostname of machine to name specified in ansible inventory become: true ansible.builtin.hostname: @@ -10,4 +9,4 @@ ansible.builtin.lineinfile: path: /etc/hosts regexp: '^127\.0\.0\.1' - line: "127.0.0.1 localhost {{ inventory_hostname }}" + line: "127.0.0.1 localhost {{ inventory_hostname }}" diff --git a/roles/ssh-hardening/tasks/main.yml b/roles/ssh-hardening/tasks/main.yml index 035258a..58aebb1 100644 --- a/roles/ssh-hardening/tasks/main.yml +++ b/roles/ssh-hardening/tasks/main.yml @@ -1,11 +1,11 @@ --- - - name: Disable password based login with SSH ansible.builtin.lineinfile: - regexp: '^#PasswordAuthentication yes' + regexp: "^#PasswordAuthentication yes" line: "PasswordAuthentication no" path: /etc/ssh/sshd_config.d/ssh-hardening.conf create: true + mode: "0600" - name: Reload sshd service ansible.builtin.systemd: