blob: 7786808a5365e8922058e06ba8f321145495c510 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
# Ansible Role: ssh
This role configure the ssh functionality of a linux distro with hardening
## Role Variables
- `username` the user account to be added to the ssh allowed users.
- `ssh_port` the port number to be enabled for ssh (default: 2222)
## Internals
- ensure that ssh packages is installed and enabled
- configure ssh host keys
- configure ssh defaults
- disable keyboard interactive authentication
- disable PAM authentication
- configure ssh authentication policy (hardened)
- configure custom ssh port
- disable password authentication
- require public key authentication
- disable root login
- add user (username) to allowed authentication users
- TBA: `fail2ban`
|
