Harden SSH access on server profile

2026-05-30 15:39:58 +00:00 · 2026-03-25 22:26:07 +01:00
parent 88a9126afb
commit 686d77d942
3 changed files with 33 additions and 0 deletions
--- a/ansible/inventory/group_vars/server.yml
+++ b/ansible/inventory/group_vars/server.yml
@@ -30,3 +30,9 @@ server_templates:
 server_ufw_rules:
  - rule: allow
    name: OpenSSH
+
+server_sshd_settings:
+  PermitRootLogin: "no"
+
+server_sshd_allow_users:
+  - "{{ username }}"