asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

ssh managment

Browse source
This commit is contained in:
Sergei Poljanski 2025-11-09 11:58:19 +02:00
commit f6c583ddfc
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ansible/roles/ssh_hardening/tasks/main.yaml
View file

@ -101,3 +101,4 @@
- iptables rules: SSH blocked except from trusted networks
{% endif %}
- Strong cryptography enforced (RSA-SHA2, Ed25519, ChaCha20, AES-GCM)
- Authorized keys files: .ssh/authorized_keys (manual), .ssh/authorized_keys.forgejo (git-managed)