feat(ssh): allow configuring MaxSessions

famedly · Feb 29, 2024 · f204f30 · f204f30
1 parent b8af3d5
commit f204f30
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/roles/ssh/tasks/main.yml b/roles/ssh/tasks/main.yml
@@ -48,6 +48,24 @@
   notify: "reload sshd"
   tags: ["prepare", "prepare-sshd"]
 
+- name: "Set maximum number of open sessions permitted per network connection"
+  ansible.builtin.lineinfile:
+    <<: *sshd_config_args
+    regexp: "^#?MaxSessions"
+    line: "MaxSessions {{ sshd_config_max_sessions }}"
+  when: "sshd_config_max_sessions is defined"
+  notify: "reload sshd"
+  tags: ["prepare", "prepare-sshd"]
+
+- name: "Unset maximum number of open sessions permitted per network connection"
+  ansible.builtin.lineinfile:
+    <<: *sshd_config_args
+    regexp: "^#?MaxSessions"
+    line: "#MaxSessions 10"
+  when: "sshd_config_max_sessions is not defined"
+  notify: "reload sshd"
+  tags: ["prepare", "prepare-sshd"]
+
 - name: "Only allow SSHv2"
   ansible.builtin.lineinfile:
     <<: *sshd_config_args