fscotto/infra
1
0
Fork 0
mirror of https://github.com/fscotto/infra.git synced 2026-09-28 11:13:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(aegis): manage firewall and SSH hardening

Browse Source
This commit is contained in:
Fabio Scotto di Santolo
2026-09-05 13:30:25 +02:00
parent 46ae536570
commit 1933ddbe8f
9 changed files with 203 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ansible/roles/profile_aegis/templates/00-aegis-hardening.conf.j2 Normal file
View File

@@ -0,0 +1,6 @@
# Managed by Ansible. Do not edit manually.
PermitRootLogin no
PubkeyAuthentication yes
PasswordAuthentication no
KbdInteractiveAuthentication no
AllowUsers {{ aegis_ssh_allowed_users | join(' ') }}

6
ansible/roles/profile_aegis/templates/aegis-adguard-web.xml.j2 Normal file
View File

@@ -0,0 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<service>
<short>Aegis AdGuard Home web interface</short>
<description>AdGuard Home administrative web interface on Aegis.</description>
<port protocol="tcp" port="{{ aegis_adguard_web_port }}"/>
</service>