Conditionally disable configuring SSHd; closed #4

nephosolutions · Apr 28, 2020 · 37aa7a3 · 37aa7a3
1 parent b1cf7c5
commit 37aa7a3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -7,3 +7,4 @@ sftp_allow_passwords: False
 sftp_enable_selinux_support: False
 sftp_enable_logging: False
 sftp_nologin_shell: /sbin/nologin
+sftp_configure_sshd: true
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -21,6 +21,7 @@
     line: "Subsystem sftp internal-sftp -f AUTH -l VERBOSE"
     state: present
   notify: SFTP-Server | Restart sshd
+  when: sftp_configure_sshd
 
 - name: SFTP-Server | Ensure SELinux management package is present
   package:
@@ -50,6 +51,7 @@
           ForceCommand internal-sftp {{ sftp_enable_logging | ternary('-l VERBOSE', '') }} {{ (sftp_start_directory in sftp_directories) | ternary('-d /' + sftp_start_directory, '') }}
           PasswordAuthentication {{ sftp_allow_passwords | ternary('yes', 'no') }}
   notify: SFTP-Server | Restart sshd
+  when: sftp_configure_sshd
 
 - name: SFTP-Server | Create sftp user's group
   group: