Harden Atlas network, SSH, firewall, and sharing

2026-09-27 19:03:47 +00:00 · 2026-09-13 00:01:48 +02:00
parent db10d1296e
commit b4b3bd10b8
12 changed files with 260 additions and 65 deletions
--- a/ansible/roles/profile_atlas/templates/smb.conf.j2
+++ b/ansible/roles/profile_atlas/templates/smb.conf.j2
@@ -4,6 +4,10 @@
  security = user
  map to guest = Never
  server min protocol = SMB3
+  server signing = mandatory
+  smb encrypt = {{ atlas_samba_encryption }}
+  disable netbios = yes
+  smb ports = 445
  hosts allow = {{ atlas_lan_subnet }}
  include = registry