mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 19:03:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
25 lines
614 B
Django/Jinja
25 lines
614 B
Django/Jinja
# Managed by Ansible. Do not edit manually.
|
|
PermitRootLogin no
|
|
PubkeyAuthentication yes
|
|
PasswordAuthentication no
|
|
KbdInteractiveAuthentication no
|
|
AuthenticationMethods publickey
|
|
AuthorizedKeysFile {{
|
|
atlas_admin_ssh_keys
|
|
| map(attribute='name')
|
|
| map('regex_replace', '^', '%h/.ssh/authorized_keys.d/')
|
|
| join(' ')
|
|
}}
|
|
X11Forwarding no
|
|
AllowTcpForwarding {{ atlas_ssh_allow_tcp_forwarding }}
|
|
AllowAgentForwarding no
|
|
GatewayPorts no
|
|
PermitTunnel no
|
|
PermitUserEnvironment no
|
|
MaxAuthTries 3
|
|
LoginGraceTime 30
|
|
ClientAliveInterval 300
|
|
ClientAliveCountMax 2
|
|
LogLevel VERBOSE
|
|
AllowUsers {{ atlas_admin_username }}
|