max/vmn-ansible
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Dev to main #1

Merged
max merged 37 commits from dev into main 2026-08-17 16:15:03 +04:00
Conversation 0 Commits 37 Files Changed 51
+8 -4
3 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 39408cab31 - Show all commits
inventory/hosts.yaml
+4
View File
@@ -7,3 +7,7 @@ physical:
ansible_python_interpreter: "{{ ansible_playbook_python }}" ansible_python_interpreter: "{{ ansible_playbook_python }}"
192.168.0.98: 192.168.0.98:
ansible_become_password: "{{ ansible_become_passwd }}" ansible_become_password: "{{ ansible_become_passwd }}"
192.168.0.6:
ansible_become_password: "{{ ansible_become_passwd }}"
192.168.0.8:
ansible_become_password: "{{ ansible_become_passwd }}"
roles/harden_ssh/files/hardened_sshd.conf
+2 -2
View File
@@ -2,7 +2,7 @@ PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no PasswordAuthentication no
KbdInteractiveAuthentication no KbdInteractiveAuthentication no
UsePAM no UsePAM yes
# Disable password authentication — keys only # Disable password authentication — keys only
PasswordAuthentication no PasswordAuthentication no
ChallengeResponseAuthentication no ChallengeResponseAuthentication no
@@ -26,4 +26,4 @@ MaxSessions 3
# Use modern key exchange and ciphers, prioritize post-quantum algorithms (mlkem and sntrup) # Use modern key exchange and ciphers, prioritize post-quantum algorithms (mlkem and sntrup)
KexAlgorithms mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org KexAlgorithms mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com
roles/update_configs/tasks/main.yaml
+2 -2
View File
@@ -17,7 +17,7 @@
- name: Configure ranger, by pushing the config - name: Configure ranger, by pushing the config
ansible.builtin.copy: ansible.builtin.copy:
src: "{{ role_path }}/files/ranger_config" src: "{{ role_path }}/files/ranger_config/"
dest: /home/max/.config/ranger dest: /home/max/.config/ranger
owner: max owner: max
group: max group: max
@@ -25,7 +25,7 @@
- name: Configure neovim, by pushing the config - name: Configure neovim, by pushing the config
ansible.builtin.copy: ansible.builtin.copy:
src: "{{ role_path }}/files/nvim_config" src: "{{ role_path }}/files/nvim_config/"
dest: /home/max/.config/nvim dest: /home/max/.config/nvim
owner: max owner: max
group: max group: max