Ansible SSH Hardening

=========

This role helps to secure SSH by doing the following:

• Change the SSH port
• Turn off SSH password login
• Set SELinux settings
• Allow the new SSH port in the firewall
• Install and set up fail2ban for SSH

How to Get This Role

Run the following command:

ansible-galaxy install --roles-path ./roles/ siw36.ansible_ssh_hardening

Requirements

• A RHEL-based operating system (like RHEL, CentOS, or Fedora)
• Python 3 should be the default Python interpreter
• The user on the remote machine must be able to run sudo commands without needing to enter a password.

Role Variables

Example Playbook

Create a file called playbook.yml:

- hosts: servers
  become: true
  roles:
     - siw36.ansible_ssh_hardening

Add this to vars/main.yml:

vmAdmins:
  - user: siw36
    sshKey: ssh-rsa xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx siw36
allowedInterfaces:
  - eth0

License

This project is licensed under the GNU General Public License v3.0.

Author Information

Created by Robin 'siw36' Klussmann (07/2019)