initial commit

roles/banners/handlers/main.yml

@@ -0,0 +1,5 @@
+---
+- name: restart sshd (banners)
+  ansible.builtin.systemd:
+    name: sshd
+    state: restarted

roles/banners/tasks/main.yml

@@ -0,0 +1,21 @@
+---
+- name: Deploy local console login banner
+  ansible.builtin.template:
+    src: issue.j2
+    dest: /etc/issue
+    owner: root
+    group: root
+    mode: "0644"
+  when: banner_enabled | bool
+  tags: [banners]
+
+- name: Deploy network (pre-auth SSH) login banner
+  ansible.builtin.template:
+    src: issue.net.j2
+    dest: /etc/issue.net
+    owner: root
+    group: root
+    mode: "0644"
+  when: banner_enabled | bool
+  notify: restart sshd (banners)
+  tags: [banners]

roles/banners/templates/issue.j2

@@ -0,0 +1,5 @@
+******************************************************************
+  AUTHORIZED ACCESS ONLY.
+  All activity on this system is logged and monitored.
+  Unauthorized access is prohibited and may be prosecuted.
+******************************************************************

roles/banners/templates/issue.net.j2

@@ -0,0 +1,5 @@
+******************************************************************
+  AUTHORIZED ACCESS ONLY.
+  All activity on this system is logged and monitored.
+  Unauthorized access is prohibited and may be prosecuted.
+******************************************************************