freifunk/Ansible-Configuration Changeset - 575ae5996f86 · Chaos Computer Club Lëtzebuerg Projects

Changeset - 575ae5996f86

Parent rev.

Child rev.

[Not reviewed]

0 1 0

x - 21 months ago 2023-08-24 01:50:34
xbr@c3l.lu

fix: use name for removal sshd_config actions

1 file changed with 3 insertions and 0 deletions:

initial_server_setup/initial_setup.yml

0 comments (0 inline, 0 general)

initial_server_setup/initial_setup.yml

➞

Show inline comments

@@ @@ -48,50 +48,53 @@ @@
         state: present
       tags: network,hostname,dns
     # SSH security improvements (EmptyPass, PassAuth, RootLogin)
     - name: Disable SSH Password Auth
       ansible.builtin.copy:
         dest: /etc/ssh/sshd_config.d/disable_password_auth.conf
         owner: root
         mode: u=rw,g=r,o=r
         content: |
           # {{ ansible_managed }}
           PasswordAuthentication no
     - name: Remove SSH Password Auth from sshd_config
       ansible.builtin.lineinfile:
         path: /etc/ssh/sshd_config
         regex: "^PasswordAuthentication"
         line: "# PasswordAuthentication No"
       tags: network,ssh
     - name: Disable SSH Empty Password
       ansible.builtin.copy:
         dest: /etc/ssh/sshd_config.d/disable_empty_password.conf
         owner: root
         mode: u=rw,g=r,o=r
         content: |
           # {{ ansible_managed }}
           PermitEmptyPasswords no
     - name: Remove SSH Empty Password from sshd_config
       ansible.builtin.lineinfile:
         path: /etc/ssh/sshd_config
         regex: "^PermitEmptyPasswords"
         line: "# PermitEmptyPasswords No"
       tags: network,ssh
     - name: Disable SSH Root Login
       ansible.builtin.copy:
         dest: /etc/ssh/sshd_config.d/disable_root_login.conf
         owner: root
         mode: u=rw,g=r,o=r
         content: |
           # {{ ansible_managed }}
           PermitRootLogin no
     - name: Remove SSH Root Login from sshd_config
       ansible.builtin.lineinfile:
         path: /etc/ssh/sshd_config
         regex: "^PermitRootLogin"
         line: "# PermitRootLogin No"
       tags: network,ssh
     # Create Freifunk Users
     - name: Create member users
       ansible.builtin.user:
         name: "{{ item.username }}"
         password: "{{ password | password_hash('sha512') }}"
         update_password: "on_create"

0 comments (0 inline, 0 general)