diff options
| author | Ahmed Abdelhalim <[email protected]> | 2026-07-26 00:58:07 +0200 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2026-07-26 00:58:07 +0200 |
| commit | 87c598e0adb88581982bfa59375bdd1a7fe53969 (patch) | |
| tree | bfe95b93f828c8ff486223ee751cdc7664cf2c20 /roles/ssh/README.md | |
| parent | d3d8d2872b87d9888f2264959ea48874522334cd (diff) | |
Change the ssh role to only inject pre-generated keys
Co-Authored-By: Claude.ai
Diffstat (limited to 'roles/ssh/README.md')
| -rw-r--r-- | roles/ssh/README.md | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/roles/ssh/README.md b/roles/ssh/README.md index 7786808a..f61da5cf 100644 --- a/roles/ssh/README.md +++ b/roles/ssh/README.md @@ -6,11 +6,14 @@ This role configure the ssh functionality of a linux distro with hardening - `username` the user account to be added to the ssh allowed users. - `ssh_port` the port number to be enabled for ssh (default: 2222) +- `ssh_private_key` pre-generated Ed25519 host private key, unique per host. Generate with: + `ssh-keygen -t ed25519 -f host_key -C '' -N ''` +- `ssh_public_key` matching pre-generated Ed25519 host public key ## Internals - ensure that ssh packages is installed and enabled -- configure ssh host keys +- deploy pre-generated ssh host keys (stable across reprovision/reimage, no key regeneration on each setup) - configure ssh defaults - disable keyboard interactive authentication - disable PAM authentication |