hypervisors/ansible/sshd.conf.j2

TrustedUserCAKeys /etc/ssh/user_ca_key.pub

Match User {{ backup_share_user }}
	AuthorizedPrincipalsFile /etc/ssh/backup_principals
	ChrootDirectory /kvm/data
	ForceCommand internal-sftp
	AllowTcpForwarding no
	X11Forwarding no

Match User {{ backup_control_user }}
	AuthorizedPrincipalsFile /etc/ssh/backup_principals
	ForceCommand /home/{{ backup_control_user }}/control.sh
	AllowTcpForwarding no
	X11Forwarding no
add user for backup allow user cert for backup user 2023-04-11 06:54:34 +00:00			`TrustedUserCAKeys /etc/ssh/user_ca_key.pub`

change backup user name 2023-04-11 15:41:11 +00:00			`Match User {{ backup_share_user }}`
			`AuthorizedPrincipalsFile /etc/ssh/backup_principals`
add user for backup allow user cert for backup user 2023-04-11 06:54:34 +00:00			`ChrootDirectory /kvm/data`
			`ForceCommand internal-sftp`
change permissions of data libvirt volume pool 2023-04-11 15:09:24 +00:00			`AllowTcpForwarding no`
			`X11Forwarding no`
add backup control user to start/stop virtual machines 2023-04-11 19:18:03 +00:00
			`Match User {{ backup_control_user }}`
			`AuthorizedPrincipalsFile /etc/ssh/backup_principals`
			`ForceCommand /home/{{ backup_control_user }}/control.sh`
			`AllowTcpForwarding no`
			`X11Forwarding no`