asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ansible rework

Browse source
This commit is contained in:
Sergei Poljanski 2025-11-04 11:06:35 +02:00
commit eecff4345a
47 changed files with 1995 additions and 538 deletions
Download patch file Download diff file Expand all files Collapse all files

5
ansible/roles/ssh_hardening/defaults/main.yaml
View file

@ -2,9 +2,10 @@
# SSH Hardening Role Default Variables
# Networks allowed to access SSH (VPC and WireGuard)
# These reference the centralized network variables from group_vars/network.yaml
ssh_allowed_networks:
- 10.20.0.0/24 # WireGuard VPN
- 10.10.0.0/20 # Internal VPC
- "{{ wireguard_network }}" # WireGuard VPN
- "{{ vpc_network }}" # Internal VPC
# Whether to allow public SSH access for git operations (Forgejo)
# Set to true on Forgejo host, false on other servers