[sysconfig] SSH: Split pubkey and rest of config, add more options

Now we can have exactly one SSH-Config per sysconfig, which avoids
confusion due to config mismatch regarding "allow pw" and "port".
The install include takes care of splitting the key into a new module
for existing modules, but doesn't remove duplicate SshConfig modules
from sysconfigs, as this might lead to additional confusion. Next time
the user edits a sysconfig, they are forced to pick exactly one
SshConfig module.

The "allow password login" option was extended to allow password login
for non-root users only in addition to simply being "yes" or "no".
There's an additional option that can entirely limit the group of users
allowed to log in via SSH.

1 files changed, 6 insertions, 3 deletions

diff --git a/modules-available/sysconfig/lang/en/config-module.json b/modules-available/sysconfig/lang/en/config-module.json
index 6728f5fd..d4e1a8cc 100644
--- a/modules-available/sysconfig/lang/en/config-module.json
+++ b/modules-available/sysconfig/lang/en/config-module.json
@@ -9,11 +9,14 @@
     "group_branding": "Branding",
     "group_generic": "Generic",
     "group_screensaver": "Screen saver styling",
-    "group_sshconfig": "SSH",
+    "group_sshconfig": "SSH config",
+    "group_sshkey": "SSH key",
     "ldapAuth_description": "This module enables you to create a simple LDAP authentication module.",
     "ldapAuth_title": "LDAP Authentication",
     "screensaver_title": "Screensaver customization",
     "screensaver_description": "With this module you can customize the style (QSS) and texts of the screensaver.",
     "sshconfig_description": "Here you can set whether the sshd on the clients will start, and what options it will use.",
-    "sshconfig_title": "SSH daemon"
-}
\ No newline at end of file
+    "sshconfig_title": "SSH daemon",
+    "sshkey_title": "SSH key",
+    "sshkey_description": "Add a public key to the authorized_keys file of the root user. You can then use the according private key to log in on a running client as root via SSH. root login needs to be enabled in the according SSH daemon module."
+}