Dzahn has submitted this change and it was merged.
Change subject: ssh server: make ListenAddress configurable
......................................................................
ssh server: make ListenAddress configurable
for situations like Id27657ca29e4196088
Bug: 35611
RT: 8838
Change-Id: Icb4cbadb2d3766869dbc5310121b69fc9e450bf2
---
M modules/ssh/manifests/server.pp
M modules/ssh/templates/sshd_config.erb
2 files changed, 5 insertions(+), 0 deletions(-)
Approvals:
Alexandros Kosiaris: Looks good to me, approved
jenkins-bot: Verified
diff --git a/modules/ssh/manifests/server.pp b/modules/ssh/manifests/server.pp
index 56b93a9..255ab46 100644
--- a/modules/ssh/manifests/server.pp
+++ b/modules/ssh/manifests/server.pp
@@ -1,5 +1,6 @@
class ssh::server (
$listen_port = '22',
+ $listen_address = undef,
) {
package { 'openssh-server':
ensure => latest;
diff --git a/modules/ssh/templates/sshd_config.erb
b/modules/ssh/templates/sshd_config.erb
index 03e37e8..4d67e46 100644
--- a/modules/ssh/templates/sshd_config.erb
+++ b/modules/ssh/templates/sshd_config.erb
@@ -4,9 +4,13 @@
# What ports, IPs and protocols we listen for
Port <%= @listen_port %>
+<% if @listen_address %>
+ListenAddress <%= @listen_address %>
+<% else %>
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
+<% end %>
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
--
To view, visit https://gerrit.wikimedia.org/r/172803
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Icb4cbadb2d3766869dbc5310121b69fc9e450bf2
Gerrit-PatchSet: 5
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: JanZerebecki <[email protected]>
Gerrit-Reviewer: John F. Lewis <[email protected]>
Gerrit-Reviewer: Ori.livneh <[email protected]>
Gerrit-Reviewer: Yuvipanda <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
