blob: 7b125dba15f7af2c4732d2cb72d245f52e0bcc57 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
# Always allow root logins.
+:root:ALL
# Allow icinga user for monitoring via SSH.
+:${icinga_local_user}:ALL
$(if [ -n "${acmeproxy_client_group:-}" ]; then
echo "+:(${acmeproxy_client_group}):ALL"
fi
if [ -n "${login_access_groups:-}" ] || [ -n "${login_access_users:-}" ]; then
printf -- '-:ALL EXCEPT '
if [ -n "${login_access_groups:-}" ]; then
printf '(%s) ' ${login_access_groups}
fi
if [ -n "${login_access_users:-}" ]; then
printf '%s ' ${login_access_users}
fi
printf ':ALL\n'
fi)
|