diff --git a/inventory/hosts.yaml b/inventory/hosts.yaml index 213afae..b38a87b 100644 --- a/inventory/hosts.yaml +++ b/inventory/hosts.yaml @@ -7,3 +7,7 @@ physical: ansible_python_interpreter: "{{ ansible_playbook_python }}" 192.168.0.98: ansible_become_password: "{{ ansible_become_passwd }}" + 192.168.0.6: + ansible_become_password: "{{ ansible_become_passwd }}" + 192.168.0.8: + ansible_become_password: "{{ ansible_become_passwd }}" diff --git a/roles/harden_ssh/files/hardened_sshd.conf b/roles/harden_ssh/files/hardened_sshd.conf index 21f4436..498fad4 100644 --- a/roles/harden_ssh/files/hardened_sshd.conf +++ b/roles/harden_ssh/files/hardened_sshd.conf @@ -2,7 +2,7 @@ PubkeyAuthentication yes AuthorizedKeysFile .ssh/authorized_keys PasswordAuthentication no KbdInteractiveAuthentication no -UsePAM no +UsePAM yes # Disable password authentication — keys only PasswordAuthentication no ChallengeResponseAuthentication no @@ -26,4 +26,4 @@ MaxSessions 3 # Use modern key exchange and ciphers, prioritize post-quantum algorithms (mlkem and sntrup) KexAlgorithms mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com -MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com \ No newline at end of file +MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com diff --git a/roles/update_configs/tasks/main.yaml b/roles/update_configs/tasks/main.yaml index 88392ed..6c96394 100644 --- a/roles/update_configs/tasks/main.yaml +++ b/roles/update_configs/tasks/main.yaml @@ -17,7 +17,7 @@ - name: Configure ranger, by pushing the config ansible.builtin.copy: - src: "{{ role_path }}/files/ranger_config" + src: "{{ role_path }}/files/ranger_config/" dest: /home/max/.config/ranger owner: max group: max @@ -25,7 +25,7 @@ - name: Configure neovim, by pushing the config ansible.builtin.copy: - src: "{{ role_path }}/files/nvim_config" + src: "{{ role_path }}/files/nvim_config/" dest: /home/max/.config/nvim owner: max group: max