Changeset - 7ed8eb3962ad
[Not reviewed]
0 1 0
x - 22 months ago 2023-08-24 01:25:27
xbr@c3l.lu
fix: remove spaces from mode initial_setup
1 file changed with 3 insertions and 3 deletions:
0 comments (0 inline, 0 general)
initial_server_setup/initial_setup.yml
Show inline comments
 
@@ -44,43 +44,43 @@
 
      ansible.builtin.lineinfile:
 
        path: /etc/hosts
 
        regexp: "^{{ ansible_default_ipv6.address }}"
 
        line: "{{ ansible_default_ipv6.address }} {{ inventory_hostname }} {{ inventory_hostname }}.freifunk.lu"
 
        state: present
 
      tags: network,hostname,dns
 

	
 
    # SSH security improvements (EmptyPass, PassAuth, RootLogin)
 
    - name: Disable SSH Password Auth
 
      ansible.builtin.copy:
 
        dest: /etc/ssh/sshd_config.d/disable_password_auth.conf
 
        owner: root
 
        mode: u=rw, g=r, o=r
 
        mode: u=rw,g=r,o=r
 
        content: |
 
          '# {{ ansible_managed }}'
 
          'PasswordAuthentication no'
 
      tags: network,ssh
 
    - name: Disable SSH Empty Password
 
      ansible.builtin.copy:
 
        dest: /etc/ssh/sshd_config.d/disable_empty_password.conf
 
        owner: root
 
        mode: u=rw, g=r, o=r
 
        mode: u=rw,g=r,o=r
 
        content: |
 
          '# {{ ansible_managed }}'
 
          'PermitEmptyPasswords no'
 
      tags: network,ssh
 
    - name: Disable SSH Root Login
 
      ansible.builtin.copy:
 
        dest: /etc/ssh/sshd_config.d/disable_root_login.conf
 
        owner: root
 
        mode: u=rw, g=r, o=r
 
        mode: u=rw,g=r,o=r
 
        content: |
 
          '# {{ ansible_managed }}'
 
          'PermitRootLogin no'
 
      tags: network,ssh
 
    - name: Reload SSHD
 
      ansible.builtin.service:
 
        name: "sshd"
 
        state: "reloaded"
 
      tags: network,ssh
 

	
 
    # Create Freifunk Users
 
    - name: Create member users
0 comments (0 inline, 0 general)