Add general core server configuration

2019-08-29 09:35:19 +00:00
parent af07610006
commit 6eacffce04
16 changed files with 329 additions and 0 deletions
--- a/ansible/roles/core/files/sshd_config
+++ b/ansible/roles/core/files/sshd_config
@@ -0,0 +1,15 @@
+Port {{ ssh_port }}
+AuthenticationMethods {{ auth_methods }}
+PermitRootLogin no
+PasswordAuthentication no
+ChallengeResponseAuthentication yes
+UsePAM yes
+X11Forwarding yes
+PrintMotd no
+AcceptEnv LANG LC_*
+Subsystem       sftp    /usr/lib/openssh/sftp-server
+
+
+Match User kansible LocalPort {{ ssh_port }}
+  PasswordAuthentication no
+  AuthenticationMethods publickey