OP#575 add option to set custom config absent or file

This commit is contained in:
2026-04-14 12:27:40 +02:00
parent 45815fd385
commit cfe921b42f
2 changed files with 4 additions and 1 deletions

View File

@@ -23,7 +23,7 @@ class confdroid_ssh::main::files (
if $ssh_manage_config {
file { $sshd_custom_conf:
ensure => file,
ensure => $ssh_custom_ensure,
path => $sshd_custom_conf,
owner => $sshd_user,
group => $sshd_user,

View File

@@ -196,6 +196,8 @@
# time interval if desired. This setting can be used to limit the amount of time
# that attackers have to attempt to brute-force authentication, but should be set
# to a reasonable value to avoid disconnecting legitimate users who may need more time to log
# @param [String] ssh_custom_ensure whether the custom configuration file
# should be file or absent.
##############################################################################
class confdroid_ssh::params (
@@ -209,6 +211,7 @@ class confdroid_ssh::params (
String $ssh_source_range = '0.0.0.0/0',
# sshd configuration
String $ssh_custom_ensure = 'file',
Boolean $ssh_manage_config = true,
String $ssh_address_family = 'any',
String $ssh_listen_address = '0.0.0.0',