5bbc551106
- Reorganized Ansible project structure to follow best practices. - Created dedicated directories: , , , , and . - Categorized playbooks into (host-specific) and (service-specific). - Moved all roles into the directory and standardized their naming conventions. - Relocated to for better variable management. - Renamed to to reflect its global variable scope. - Created to correctly set the to the new directory. - Moved and into the directory. - Added to providing explanations for common commands. - Cleaned up directories from all individual roles to centralize version control.
29 lines
869 B
YAML
29 lines
869 B
YAML
---
|
|
security_ssh_port: 22
|
|
security_ssh_password_authentication: "no"
|
|
security_ssh_permit_root_login: "no"
|
|
security_ssh_usedns: "no"
|
|
security_ssh_permit_empty_password: "no"
|
|
security_ssh_challenge_response_auth: "no"
|
|
security_ssh_gss_api_authentication: "no"
|
|
security_ssh_x11_forwarding: "no"
|
|
security_sshd_state: started
|
|
security_ssh_restart_handler_state: restarted
|
|
security_ssh_allowed_users: []
|
|
security_ssh_allowed_groups: []
|
|
|
|
security_sudoers_passwordless: []
|
|
security_sudoers_passworded: []
|
|
|
|
security_autoupdate_enabled: true
|
|
security_autoupdate_blacklist: []
|
|
|
|
# Autoupdate mail settings used on Debian/Ubuntu only.
|
|
security_autoupdate_reboot: "false"
|
|
security_autoupdate_reboot_time: "03:00"
|
|
security_autoupdate_mail_to: ""
|
|
security_autoupdate_mail_on_error: true
|
|
|
|
security_fail2ban_enabled: true
|
|
security_fail2ban_custom_configuration_template: "jail.local.j2"
|