Marius Voila
b13ab39f11
cleaning security.yml
10 anni fa
fengor
7ed46f590c
renamed templates to be consistent with coding standard.
removed comment line in ssh_config
10 anni fa
fengor
39566abb6c
More secure defaults for ssh.
Ciphers, Kex and MAC can be set via defaults.var
10 anni fa
Marius Voila
e62bd7c71a
fail2ban support for Trusty
10 anni fa
Lorenzo Villani
5d1090d488
Make sure fail2ban is started
11 anni fa
Lorenzo Villani
d5ecf673d3
Calm OCD by sorting almost every with_items block in alphabetical order
11 anni fa
Justin Plock
89f018bd23
In preparation for using any 2FA solution, it will most likely need to modify sshd_config, so let's change the file in place instead of overwriting it completely.
11 anni fa
Alex Payne
f7f7157cec
more updated variable formatting and accommodation of the YAML parser being a fussbudget
11 anni fa
Luke Cyca
09c8fcb295
Named all tasks and made them idempotent where possible
12 anni fa
Luke Cyca
12d42ad38a
Configure sshd_config to disable PermitRootLogin and PasswordAuthentication
12 anni fa
Alex Payne
080d38986c
first commit
12 anni fa