Fix sshd config - set AcceptEnv conditionally

roots · Dec 11, 2022 · 19db8da · 19db8da
1 parent 5864220
commit 19db8da
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/roles/sshd/templates/sshd_config.j2 b/roles/sshd/templates/sshd_config.j2
@@ -13,7 +13,9 @@ ListenAddress {{ address }}
 
 Protocol {{ sshd_protocol }}
 
-AcceptEnv {{ sshd_accept_env | join(' ') }}
+{% if AcceptEnv | count %}
+  AcceptEnv {{ sshd_accept_env | join(' ') }}
+{% endif -%}
 AllowAgentForwarding {{ sshd_allow_agent_forwarding | ternary('yes', 'no') }}
 AllowTcpForwarding {{ sshd_allow_tcp_forwarding is string | ternary(sshd_allow_tcp_forwarding, sshd_allow_tcp_forwarding | ternary('yes', 'no')) }}
 ChallengeResponseAuthentication {{ sshd_challenge_response_authentication | ternary('yes', 'no') }}