https://github.com/jhu-library-applications/ansible-role-secure-ssh
Ansible role that configures SSH to follow better security practices
https://github.com/jhu-library-applications/ansible-role-secure-ssh
Last synced: 3 months ago
JSON representation
Ansible role that configures SSH to follow better security practices
- Host: GitHub
- URL: https://github.com/jhu-library-applications/ansible-role-secure-ssh
- Owner: jhu-library-applications
- Created: 2021-01-11T16:59:52.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2021-01-11T17:00:16.000Z (over 4 years ago)
- Last Synced: 2025-02-05T17:40:07.500Z (5 months ago)
- Homepage:
- Size: 10.7 KB
- Stars: 0
- Watchers: 7
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
Ansible Role: Secure SSH
=========
Configure SSH to follow better security practices.
Requirements
------------
### SSH key logins.
By default, this role will prevent password logins in favor of ssh keys. Running the [login-user](https://github.com/dheles/ansible-role-login-user) role first will set this up for you. If you aren't going to use that role, you will want to either achieve a similar result by another means or override this role's behavior (by means of a mechanism not yet written).
Role Variables
--------------
This role sets sane OS-specific defaults and is not yet very configurable, so the variables are simple and few:
ssh_service: ssh
The name of the service that provides SSH on your OS. Typically, ssh for Debian family and sshd of RedHat family. These two will be detected by the role. Override this variable to support other OSes, if necessary. Better yet, submit a pull request to fix it proper.
ssh_config: "/etc/ssh/sshd_config"
Location of the system-wide (not per-user) SSH configuration file on your OS (see above).
Dependencies
------------
None, per se, but see "Requirements" above.
Example Playbook
----------------
- name: secure SSH
hosts: all
become: true
roles:
- { role: secure-ssh }
License
-------
CC0
Author Information
------------------
Drew Heles