ISTI-ansible-roles
/
ansible-role-vsftpd
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update 'templates/vsftpd.conf.j2'

This commit is contained in:
Tommaso Piccioli 2021-10-20 16:01:09 +02:00
parent de799c3b80
commit 051d81caef
1 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
templates/vsftpd.conf.j2
View File

@ -117,6 +117,14 @@ secure_chroot_dir=/var/run/vsftpd/empty
# This string is the name of the PAM service vsftpd will use. # This string is the name of the PAM service vsftpd will use.
pam_service_name=vsftpd pam_service_name=vsftpd
# #
{% if vsftpd_force_tls %}
{% set value_force_local_logins_ssl = 'YES' %}
{% set value_force_local_data_ssl = 'YES' %}
{% else %}
{% set value_force_local_logins_ssl = 'NO' %}
{% set value_force_local_data_ssl = 'NO' %}
{% endif %}
#
{% if vsftpd_tls_enabled %} {% if vsftpd_tls_enabled %}
# SSL/TLS # SSL/TLS
ssl_enable=YES ssl_enable=YES
@ -136,16 +144,9 @@ ssl_tlsv1=YES
ca_certs_file={{ vsftpd_ssl_ca_certificate }} ca_certs_file={{ vsftpd_ssl_ca_certificate }}
rsa_cert_file={{ vsftpd_ssl_certificate }} rsa_cert_file={{ vsftpd_ssl_certificate }}
rsa_private_key_file={{ vsftpd_ssl_certificate_key }} rsa_private_key_file={{ vsftpd_ssl_certificate_key }}
{% if vsftpd_force_tls %} force_local_logins_ssl={{ value_force_local_logins_ssl }}
force_local_logins_ssl=YES force_local_data_ssl={{ value_force_local_data_ssl }}
force_local_data_ssl=YES
{% else %}
force_local_logins_ssl=NO
force_local_data_ssl=NO
{% endif %}
require_ssl_reuse={{ vsftpd_require_ssl_reuse }} require_ssl_reuse={{ vsftpd_require_ssl_reuse }}
{% endif %}
{% else %}
# This option specifies the location of the RSA certificate to use for SSL # This option specifies the location of the RSA certificate to use for SSL
# encrypted connections. # encrypted connections.
rsa_cert_file=/etc/ssl/private/vsftpd.pem rsa_cert_file=/etc/ssl/private/vsftpd.pem