ricsanfre.security

Ansible Role: Security

CI

This role helps to make Linux systems more secure.

  • It includes tasks to improve SSH security.

Requirements

No special requirements.

Role Variables

Here are the available settings, along with their default values (found in defaults\main.yaml):

The settings for SSH security help to:

  • Turn off login/password access (only SSH keys allowed).

  • Disable root logins and more.

  • security_ssh_password_authentication: "no"

  • security_ssh_permit_root_login: "no"

  • security_ssh_usedns: "no"

  • security_ssh_permit_empty_password: "no"

  • security_ssh_challenge_response_auth: "no"

  • security_ssh_gss_api_authentication: "no"

  • security_ssh_x11_forwarding: "no"

Dependencies

No dependencies.

Example Playbooks

Apply default security rules

This playbook installs and sets up a firewall on a server with the default security rules:

- hosts: server
  roles:
    - ricsanfre.security
Informazioni sul progetto

Security hardening role

Installa
ansible-galaxy install ricsanfre.security
Licenza
Unknown
Download
11.2k
Proprietario
Telecom engineer.