max/vmn-ansible
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FIX: copy instruction in update_configs role, enabled PAM in sshd config

Browse Source
This commit is contained in:
Maxim Vershinin
2026-08-11 13:55:42 +04:00
parent 88853b3adc
commit 39408cab31
3 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/harden_ssh/files/hardened_sshd.conf
+2 -2
View File
@@ -2,7 +2,7 @@ PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no
KbdInteractiveAuthentication no
UsePAM no
UsePAM yes
# Disable password authentication — keys only
PasswordAuthentication no
ChallengeResponseAuthentication no
@@ -26,4 +26,4 @@ MaxSessions 3
# Use modern key exchange and ciphers, prioritize post-quantum algorithms (mlkem and sntrup)
KexAlgorithms mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com