ansible/ssh_tunnel
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
Ansible role to set up an ssh tunnel for port forwardings
9 commits 1 branch 0 tags 42 KiB
Find a file
Philip (a-0) 56581dd690 added daemon-reload after setting autossh service file
2022-08-07 23:55:26 +02:00
defaults Initial commit 2022-07-13 12:52:07 +02:00
handlers Initial commit 2022-07-13 12:52:07 +02:00
meta Added default meta/main.yml 2022-07-13 13:02:49 +02:00
tasks added daemon-reload after setting autossh service file 2022-08-07 23:55:26 +02:00
templates autossh now always restarts upon any stop event 2022-08-07 23:12:41 +02:00
vars fixed sshd conf.d path 2022-07-13 13:04:03 +02:00
example_playbook.yml Initial commit 2022-07-13 12:52:07 +02:00
README.md Removed unnecessary warning from README 2022-07-13 13:06:37 +02:00

README.md

An ansible role to set up an ssh tunnel and port forwardings from the remote machine to local machines

Required variables

... e.g. in group_vars

  • ssh_tunnel_pubkey: The complete line to be used in authorized_keys, e.g. "ssh-ed25519 AAAA[...]aU root@mylocalmachine"
  • ssh_tunnel_privkey: The content of the corresponding private key file, including the BEGIN and END tags. It is highly recommended to put this inside an encrypted ansible vault.
  • tunneled_ports: A list of port forwardings. Example: 
    tunneled_ports:
- exposed_port: 80 # public port at the remote machine
  ephemeral_port: 10080 # internal port at remote machine's localhost address. The ssh tunnel will fetch traffic from there
  dest_host: my-internal-http-server.local.domain.tld # domain or IP address of the destination machine. Must be reachable form the local machine.
  dest_port: 80 # open port at the destination machine
  protocols: ["tcp"] # list of protocols for this forwarding. "tcp" and "udp" are supported.