2 Commits

Include renames

Author	SHA1	Message	Date
mrcharles	e9003721e3	[#385] ssh_ca handler: distro-tolerant reload (sshd vs ssh service names) ... preprod-cloudron runs Ubuntu-derived Cloudron OS where the unit is ssh, not sshd. Both reload paths fire under one listen keyword; failures are non-fatal (config already validated by sshd -t). https://projects.knownelement.com/issues/385	2026-09-06 01:54:07 -05:00
mrcharles	88e3f40331	[#385] ssh_ca role + onboarding playbook (fleet SSH cert CA rollout) ... Idempotent role: install fleet User CA public key + TrustedUserCAKeys drop-in, validate sshd -t, reload. Sectestbed wave first, prod under CR. https://projects.knownelement.com/issues/385	2026-09-05 17:11:12 -05:00