X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/f93235356b0a6a47a562b6d5f21086c56addc570..df6f1a270ee88172043e778011967e3b907350bf:/cookbooks/openssh/recipes/default.rb diff --git a/cookbooks/openssh/recipes/default.rb b/cookbooks/openssh/recipes/default.rb index 78df22c5e..8b57aaaef 100644 --- a/cookbooks/openssh/recipes/default.rb +++ b/cookbooks/openssh/recipes/default.rb @@ -27,7 +27,7 @@ template "/etc/ssh/sshd_config.d/chef.conf" do source "sshd_config.conf.erb" owner "root" group "root" - mode 0o644 + mode "644" notifies :restart, "service[ssh]" only_if { Dir.exist?("/etc/ssh/sshd_config.d") } end @@ -73,7 +73,7 @@ end template "/etc/ssh/ssh_known_hosts" do source "ssh_known_hosts.erb" - mode 0o444 + mode "444" owner "root" group "root" backup false @@ -84,8 +84,7 @@ end firewall_rule "accept-ssh" do action :accept - source "net" - dest "fw" - proto "tcp:syn" + context :incoming + protocol :tcp dest_ports node[:openssh][:port] end