zlopez/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

basessh: allow tcp forwarding on noc as well as bastion.

Browse source 
We sometimes use forwarding here to access mgmt devices.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2026-05-29 10:41:46 -07:00
commit 141940d1ad
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/basessh/templates/sshd_config.j2
View file

@ -40,8 +40,8 @@ UsePAM yes
AllowAgentForwarding no
X11Forwarding no
PermitTunnel no
{% if ansible_hostname.startswith(('bastion')) %}
# This is a bastion host, we need tcp forwarding here.
{% if ansible_hostname.startswith(('bastion')) or ansible_hostname.startswith(('noc')) %}
# This is a bastion or noc host, we need tcp forwarding there.
AllowTcpForwarding yes
{% else %}
AllowTcpForwarding no