2 files changed, 18 insertions, 0 deletions
diff --git a/ansible/roles/pydis-users/meta/main.yml b/ansible/roles/pydis-users/meta/main.yml
new file mode 100644
index 0000000..5526b6b
--- /dev/null
+++ b/ansible/roles/pydis-users/meta/main.yml
@@ -0,0 +1,3 @@
+---
+dependencies:
+  - ssh
diff --git a/ansible/roles/pydis-users/tasks/main.yml b/ansible/roles/pydis-users/tasks/main.yml
index 8378af8..c9642d7 100644
--- a/ansible/roles/pydis-users/tasks/main.yml
+++ b/ansible/roles/pydis-users/tasks/main.yml
@@ -25,3 +25,18 @@
   loop: "{{ pydis_users__users | dict2items }}"
   tags:
     - role::pydis-users
+
+- name: Allow SSH logins for pydis users
+  ansible.builtin.copy:
+    content: |
+      # Ansible managed
+
+      AllowUsers {{ pydis_users__users | sort | join(' ') }}
+    dest: /etc/ssh/sshd_config.d/pydis-users-login.conf
+    owner: root
+    group: root
+    mode: "0444"
+  notify:
+    - Reload ssh
+  tags:
+    - role::pydis-users