Restructure repository, removing old stuff
This commit is contained in:
14
_legacy/tasks/sshd/banner.yml
Normal file
14
_legacy/tasks/sshd/banner.yml
Normal file
@@ -0,0 +1,14 @@
|
||||
---
|
||||
- name: Install SSH Banner
|
||||
become: true
|
||||
template:
|
||||
src: motd.j2
|
||||
dest: /etc/issue.net
|
||||
mode: 0644
|
||||
|
||||
- name: Configure SSH banner
|
||||
become: true
|
||||
lineinfile:
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: '#Banner none'
|
||||
line: 'Banner /etc/issue.net'
|
21
_legacy/tasks/sshd/disable-password-auth.yml
Normal file
21
_legacy/tasks/sshd/disable-password-auth.yml
Normal file
@@ -0,0 +1,21 @@
|
||||
- name: Turn off password authentication
|
||||
become: true
|
||||
replace:
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: "PasswordAuthentication yes"
|
||||
replace: "PasswordAuthentication no"
|
||||
|
||||
- name: Turn off challenge response authentication
|
||||
become: true
|
||||
replace:
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: "ChallengeResponseAuthentication yes"
|
||||
replace: "ChallengeResponseAuthentication no"
|
||||
|
||||
- name: Turn off GSSAPI authentication
|
||||
become: true
|
||||
replace:
|
||||
path: /etc/ssh/sshd_config
|
||||
regexp: "GSSAPIAuthentication yes"
|
||||
replace: "GSSAPIAuthentication no"
|
||||
|
Reference in New Issue
Block a user