chore: ansible-lint

roles/sshd/README.md

@@ -0,0 +1,14 @@
+# SSH server
+
+## Enable authorized_keys fallback
+
+When you encrypt your home data, you cannot allow hardened remote SSH connection.
+To make this still possible, here is the trick: a fallback authorized_key file: /etc/ssh/authorized_keys/myuser
+
+Simply enable this setting to get this working:
+
+```
+ssh_authorized_keys_fallback_enabled: true
+```
+
+And you're set.

roles/sshd/defaults/main.yml

@@ -1,3 +1,4 @@
+---
 ssh_port: 22
 ssh_allowed_network: "192.168.1.0/24"
 ssh_allowed_vpn_network: "192.168.27.0/27"

roles/sshd/tasks/main.yml

@@ -17,7 +17,7 @@
 - name: Enable SSH
   service:
     name: "{{ ssh_service_name }}"
-    enabled: yes
+    enabled: true
 
 - name: Allow local network incoming connection
   ufw:

roles/sshd/vars/archlinux.yml

@@ -1,2 +1,3 @@
+---
 ssh_package_name: "openssh"
 ssh_service_name: "sshd"

roles/sshd/vars/debian.yml

@@ -1,2 +1,3 @@
+---
 ssh_package_name: "openssh-server"
 ssh_service_name: "ssh"