class nodo::subsystem::sshd { # SSH Server # # We need to restrict listen address by default so multiple # instances can live together in the same physical host. # class { '::sshd': manage_nagios => hiera('nodo::subsystem::sshd::manage_nagios', false), listen_address => hiera('nodo::subsystem::sshd::listen_address', [ "${::ipaddress}", '127.0.0.1' ]), password_authentication => hiera('nodo::subsystem::sshd::password_authentication', 'yes'), shared_ip => hiera('nodo::subsystem::sshd::shared_ip', 'yes'), tcp_forwarding => hiera('nodo::subsystem::sshd::tcp_forwarding', 'yes'), x11_forwarding => hiera('nodo::subsystem::sshd::x11_forwarding', 'no'), hardened => hiera('nodo::subsystem::sshd::hardened', 'yes'), print_motd => hiera('nodo::subsystem::sshd::print_motd', 'no'), ports => hiera('nodo::subsystem::sshd::ports', [ 22 ]), use_pam => hiera('nodo::subsystem::sshd::use_pam', 'no'), use_storedconfigs => hiera('nodo::subsystem::use_storedconfigs', false), } # Add the localhost ssh key, useful when one needs # to ssh to localhost. sshkey { [ 'localhost', '127.0.0.1' ]: type => ssh-rsa, key => $::sshrsakey, ensure => $::sshrsakey ? { '' => absent, default => present, }, } }