ssh-certs hosts.

2026-05-22 01:52:44 +10:00
parent 5ed75ea52c
commit 8e46d64354
1 changed files with 2 additions and 0 deletions
--- a/playbooks/ssh-certs/deploy-host-certs.yml
+++ b/playbooks/ssh-certs/deploy-host-certs.yml
@@ -82,6 +82,8 @@
          Match User root Address 127.0.0.1,::1,192.168.0.71,192.168.0.72,192.168.0.73,192.168.0.74,192.168.0.75,192.168.0.89
              PermitRootLogin yes
              PubkeyAuthentication yes
+              # Включаем root в белый список только для условий этого матча:
+              AllowUsers root
        marker: "# {mark} ANSIBLE MANAGED  ROOT ACCESS for proxmoxes BLOCK #"
        create: true
        mode: '0600'