alexpires.me/a13labs.infra
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Initial ansible onboard

Browse Source
This commit is contained in:
Alexandre Pires
2024-09-24 15:19:51 +02:00
parent 7366659355
commit f445996797
492 changed files with 2214589 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ansible/roles/cis_hardening/templates/etc/ssh/ssh_config.j2
+13
View File
@@ -0,0 +1,13 @@
# {{ ansible_managed }}
{% if ssh_config_d.stat.exists and ssh_config_d.stat.isdir %}
Include /etc/ssh/ssh_config.d/*.conf
{% endif %}
Host *
Ciphers {{ sshd_ciphers }}
GSSAPIAuthentication {{ sshd_gssapi_authentication }}
HashKnownHosts yes
HostKeyAlgorithms {{ sshd_host_key_algorithms }}
KexAlgorithms {{ sshd_kex_algorithms }}
MACs {{ sshd_macs }}
RekeyLimit {{ sshd_rekey_limit }}
ansible/roles/cis_hardening/templates/etc/ssh/sshd_config.j2
+41
View File
@@ -0,0 +1,41 @@
# {{ ansible_managed }}
AcceptEnv {{ sshd_accept_env }}
AllowAgentForwarding {{ sshd_allow_agent_forwarding }}
AllowGroups {{ sshd_allow_groups }}
AllowTcpForwarding {{ sshd_allow_tcp_forwarding }}
AuthenticationMethods {{ sshd_authentication_methods }}
Banner {{ sshd_banner }}
ChallengeResponseAuthentication {{ sshd_challenge_response_authentication }}
Ciphers {{ sshd_ciphers }}
ClientAliveCountMax {{ sshd_client_alive_count_max|int }}
ClientAliveInterval {{ sshd_client_alive_interval|int }}
Compression {{ sshd_compression }}
GSSAPIAuthentication {{ sshd_gssapi_authentication }}
HostbasedAuthentication {{ sshd_hostbased_authentication }}
HostKeyAlgorithms {{ sshd_host_key_algorithms }}
IgnoreUserKnownHosts {{ sshd_ignore_user_known_hosts }}
KerberosAuthentication {{ sshd_kerberos_authentication }}
KexAlgorithms {{ sshd_kex_algorithms }}
LoginGraceTime {{ sshd_login_grace_time|int }}
LogLevel {{ sshd_log_level }}
Macs {{ sshd_macs }}
MaxAuthTries {{ sshd_max_auth_tries|int }}
MaxSessions {{ sshd_max_sessions|int }}
MaxStartups {{ sshd_max_startups }}
PasswordAuthentication {{ sshd_password_authentication }}
PermitEmptyPasswords {{ sshd_permit_empty_passwords }}
PermitRootLogin {{ sshd_permit_root_login }}
PermitUserEnvironment {{ sshd_permit_user_environment }}
Port {{ sshd_port|int }}
PrintLastLog {{ sshd_print_last_log }}
PrintMotd {{ sshd_print_motd }}
RekeyLimit {{ sshd_rekey_limit }}
{% if ssh_installed_version is version('9.1', '>') %}
RequiredRSASize {{ sshd_required_rsa_size }}
{% endif %}
StrictModes {{ sshd_strict_modes }}
Subsystem {{ sshd_subsystem }}
TCPKeepAlive {{ sshd_tcp_keep_alive }}
UseDNS {{ sshd_use_dns }}
UsePAM {{ sshd_use_pam }}
X11Forwarding {{ sshd_x11_forwarding }}