Initial ansible onboard

2024-09-24 15:19:51 +02:00
parent 7366659355
commit f445996797
492 changed files with 2214589 additions and 0 deletions
@@ -0,0 +1,28 @@
+- name: Add SSH filter script
+  become: true
+  ansible.builtin.template:
+    src: usr/bin/sshfilter.sh.j2
+    dest: /usr/bin/sshfilter.sh
+    owner: root
+    group: root
+    mode: "0755"
+
+- name: Add acl to use sshfilter.sh
+  become: true
+  ansible.builtin.template:
+    src: etc/hosts.allow.j2
+    dest: /etc/hosts.allow
+    owner: root
+    group: root
+    mode: "0644"
+    backup: true
+
+- name: Deny all hosts for sshd
+  become: true
+  ansible.builtin.template:
+    src: etc/hosts.deny.j2
+    dest: /etc/hosts.deny
+    owner: root
+    group: root
+    mode: "0644"
+    backup: true