Add a script for configuring sshd.

diff --git a/server/sshd.yaml b/server/sshd.yaml
new file mode 100644 (file)
index 0000000..7c3adcf
--- /dev/null
+++ b/server/sshd.yaml
@@ -0,0 +1,19 @@
+# Copyright (c) 2023 Jakub Czajka <jakub@ekhem.eu.org>
+# License: GPL-3.0 or later.
+
+- name: Checkout configuration
+  command: |
+    git --work-tree=/tmp --git-dir=/srv/git/server.git checkout main --force \
+      sshd/*
+  become: yes
+- name: Copy to /etc/ssh
+  copy:
+    src: "/tmp/sshd/sshd_config"
+    dest: "/etc/ssh"
+    remote_src: true
+  become: true
+- name: Restart sshd
+  service:
+    name: ssh
+    state: restarted
+  become: yes