diff --git a/svn-ssh-banner.txt b/svn-ssh-banner.txt new file mode 100644 index 0000000..5fa5d36 --- /dev/null +++ b/svn-ssh-banner.txt @@ -0,0 +1,12 @@ +{% if inventory_hostname == 'leptone.kde.org' %} +The SVN repository has moved to a new server. {# #} +{% else %} +The SVN repository will move to a new server soon. {# #} +{% endif %} +As part of that, we will +limit access only to people who need it, and use GitLab to manage the SSH keys. +To continue committing to SVN, you will need to add your SSH keys to KDE's GitLab, +and make sure your username is allowed. + +See this page for more information: +https://community.kde.org/Infrastructure/Subversion/2020_Changes diff --git a/svn-ssh-banner.yml b/svn-ssh-banner.yml new file mode 100644 index 0000000..6459515 --- /dev/null +++ b/svn-ssh-banner.yml @@ -0,0 +1,27 @@ +--- +- hosts: + - code.kde.org + - leptone.kde.org + + tasks: + - name: install banner file + template: + src: svn-ssh-banner.txt + dest: /root/svn-ssh-banner.txt + mode: 0644 + + - name: add banner config to sshd_config + blockinfile: + path: /etc/ssh/sshd_config + marker: "# {mark} ANSIBLE MANAGED ssh banner for svn" + block: | + Match User svn + Banner /root/svn-ssh-banner.txt + validate: /usr/sbin/sshd -T -f %s + notify: reload sshd + + handlers: + - name: reload sshd + service: + name: sshd + state: reloaded