inventory/hosts.yaml

@@ -7,3 +7,7 @@ physical:
       ansible_python_interpreter: "{{ ansible_playbook_python }}"
     192.168.0.98:
       ansible_become_password: "{{ ansible_become_passwd }}"
+    192.168.0.6:
+      ansible_become_password: "{{ ansible_become_passwd }}"
+    192.168.0.8:
+      ansible_become_password: "{{ ansible_become_passwd }}"

roles/harden_ssh/files/hardened_sshd.conf

@@ -2,7 +2,7 @@ PubkeyAuthentication yes
 AuthorizedKeysFile	.ssh/authorized_keys
 PasswordAuthentication no
 KbdInteractiveAuthentication no
-UsePAM no
+UsePAM yes
 # Disable password authentication — keys only
 PasswordAuthentication no
 ChallengeResponseAuthentication no

roles/update_configs/tasks/main.yaml

@@ -17,7 +17,7 @@
 
 - name: Configure ranger, by pushing the config
   ansible.builtin.copy:
-    src: "{{ role_path }}/files/ranger_config"
+    src: "{{ role_path }}/files/ranger_config/"
     dest: /home/max/.config/ranger
     owner: max
     group: max
@@ -25,7 +25,7 @@
 
 - name: Configure neovim, by pushing the config
   ansible.builtin.copy:
-    src: "{{ role_path }}/files/nvim_config"
+    src: "{{ role_path }}/files/nvim_config/"
     dest: /home/max/.config/nvim
     owner: max
     group: max