3 package { [ 'openssh-client', 'openssh-server']:
11 @ferm::rule { 'dsa-ssh':
12 description => 'Allow SSH from DSA',
13 rule => '&SERVICE_RANGE(tcp, ssh, $SSH_SOURCES)'
15 @ferm::rule { 'dsa-ssh-v6':
16 description => 'Allow SSH from DSA',
18 rule => '&SERVICE_RANGE(tcp, ssh, $SSH_V6_SOURCES)'
21 file { '/etc/ssh/ssh_config':
22 content => template('ssh/ssh_config.erb'),
23 require => Package['openssh-client']
25 file { '/etc/ssh/sshd_config':
26 content => template('ssh/sshd_config.erb'),
27 require => Package['openssh-server'],
28 notify => Service['ssh']
30 file { '/etc/ssh/userkeys':
33 require => Package['openssh-server']
35 file { '/etc/ssh/userkeys/root':
36 content => template('ssh/authorized_keys.erb'),