https://github.com/dockpack/base_common

🐧 Ansible role to configure some utilities on RedHat/Centos 7/8 systems
https://github.com/dockpack/base_common

ansible-role centos centos7 hacktoberfest hacktoberfest2021 redhat rhel7-cis rhel8 sshd-hardening

Last synced: 4 days ago
JSON representation

🐧 Ansible role to configure some utilities on RedHat/Centos 7/8 systems

• Host: GitHub
• URL: https://github.com/dockpack/base_common
• Owner: dockpack
• Created: 2017-10-26T20:15:33.000Z (about 7 years ago)
• Default Branch: master
• Last Pushed: 2024-07-11T08:58:50.000Z (4 months ago)
• Last Synced: 2024-07-11T10:23:29.316Z (4 months ago)
• Topics: ansible-role, centos, centos7, hacktoberfest, hacktoberfest2021, redhat, rhel7-cis, rhel8, sshd-hardening
• Language: Python
• Homepage:
• Size: 64.5 KB
• Stars: 1
• Watchers: 1
• Forks: 1
• Open Issues: 3
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
[![Galaxy](https://img.shields.io/badge/galaxy-dockpack.base__common-blue.svg?style=flat)](https://galaxy.ansible.com/dockpack/base_common)

base_common is a role that provisions sensible defaults for Centos 7.

- The openssh-server is hardened to [ssh-audit standards](https://www.ssh-audit.com/hardening_guides.html).

- This config removes the [deprecated ssh-rsa host key](https://www.openssh.com/txt/release-8.2)

Requirements

------------

RHEL- like system

Role Variables

--------------

```

server:

  install: true

  packages:

    - policycoreutils-python

    - libsemanage-python

    - postfix

# sshd

Ciphers: [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr

HostKeyAlgorithms: [email protected],ssh-ed25519

KexAlgorithms: [email protected],diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256

MACs: [email protected],[email protected],[email protected]

```

Dependencies

------------

base_common is a role that other base roles can depend on.

Example Usage

----------------

Refer to a complete build server https://github.com/bbaassssiiee/buildserver

License

-------

MIT

Author Information

------------------

Bas Meijer

@bbaassssiiee