rename dsa-puppet-stuff to puppet-crontab
[mirror/dsa-puppet.git] / modules / roles / manifests / static / ssh.pp
1 # wrapper for ssh setup for statichosts
2 class roles::static::ssh(
3   Variant[Array[String], String] $add_tag,
4   String                         $collect_tag,
5   )
6 {
7   ssh::keygen {'staticsync': }
8
9   ssh::authorized_key_add { 'staticsync':
10     target_user => 'staticsync',
11     command     => "/usr/local/bin/staticsync-ssh-wrap ${::fqdn}",
12     key         => $facts['staticsync_key'],
13     options     => ['restrict', 'pty'],
14     collect_tag => $add_tag,
15   }
16   ssh::authorized_key_collect { 'staticsync':
17     target_user => 'staticsync',
18     collect_tag => $collect_tag,
19   }
20 }