Skip to content

Question: How to use hiera with this module #68

@cpeetersburg

Description

@cpeetersburg

I'm trying to use the puppet-ssh-hardening module to provide a secure sshd_config to my servers. I'm using Hiera to manage my config.

When using saz-ssh I can add config in hiera as shown in the example:

ssh::server_options:
    Protocol: '2'
    ListenAddress:
        - '127.0.0.0'
        - '%{::hostname}'
    PasswordAuthentication: 'yes'
    SyslogFacility: 'AUTHPRIV'
    UsePAM: 'yes'
    X11Forwarding: 'yes'

When I try to do this using ssh-hardening it doesn't work, not when using include ssh_hardening, nor when using something like:

$ssh = lookup('ssh', Hash, 'hash')
  class { 'ssh_hardening':
    server_options => {
      * => $ssh[server_options],
  }```

How can I correctly make Hiera override default settings in this module?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions