Set-OPS/roles/ssh_hardening/templates/20-setops-hardening.conf.j2

# Managed by Ansible — Set-OPS

Port {{ ssh_hardening_port }}
PermitRootLogin {{ ssh_hardening_permit_root_login }}
PubkeyAuthentication {{ ssh_hardening_pubkey_authentication }}
PasswordAuthentication {{ ssh_hardening_password_authentication }}
AuthenticationMethods publickey
KbdInteractiveAuthentication no
ChallengeResponseAuthentication no
PermitEmptyPasswords no
HostbasedAuthentication no
IgnoreRhosts yes
X11Forwarding no
AllowTcpForwarding no
AllowAgentForwarding no
AllowStreamLocalForwarding no
PermitTunnel no
GatewayPorts no
PermitUserEnvironment no
PermitTTY yes
TCPKeepAlive no
ClientAliveInterval {{ ssh_hardening_client_alive_interval }}
ClientAliveCountMax {{ ssh_hardening_client_alive_count_max }}
MaxAuthTries {{ ssh_hardening_max_auth_tries }}
LoginGraceTime {{ ssh_hardening_login_grace_time }}
MaxSessions 2
MaxStartups 5:30:20
Ajout de nouveaux playbooke et rôles 2026-06-20 15:17:46 -04:00			`# Managed by Ansible — Set-OPS`

Structurer l'exploitation Ansible Chezlepro 2026-06-21 15:13:45 -04:00			`Port {{ ssh_hardening_port }}`
			`PermitRootLogin {{ ssh_hardening_permit_root_login }}`
			`PubkeyAuthentication {{ ssh_hardening_pubkey_authentication }}`
			`PasswordAuthentication {{ ssh_hardening_password_authentication }}`
			`AuthenticationMethods publickey`
Ajout de nouveaux playbooke et rôles 2026-06-20 15:17:46 -04:00			`KbdInteractiveAuthentication no`
Structurer l'exploitation Ansible Chezlepro 2026-06-21 15:13:45 -04:00			`ChallengeResponseAuthentication no`
Ajout de nouveaux playbooke et rôles 2026-06-20 15:17:46 -04:00			`PermitEmptyPasswords no`
Structurer l'exploitation Ansible Chezlepro 2026-06-21 15:13:45 -04:00			`HostbasedAuthentication no`
			`IgnoreRhosts yes`
Ajout de nouveaux playbooke et rôles 2026-06-20 15:17:46 -04:00			`X11Forwarding no`
			`AllowTcpForwarding no`
			`AllowAgentForwarding no`
Structurer l'exploitation Ansible Chezlepro 2026-06-21 15:13:45 -04:00			`AllowStreamLocalForwarding no`
			`PermitTunnel no`
			`GatewayPorts no`
			`PermitUserEnvironment no`
			`PermitTTY yes`
			`TCPKeepAlive no`
			`ClientAliveInterval {{ ssh_hardening_client_alive_interval }}`
			`ClientAliveCountMax {{ ssh_hardening_client_alive_count_max }}`
			`MaxAuthTries {{ ssh_hardening_max_auth_tries }}`
			`LoginGraceTime {{ ssh_hardening_login_grace_time }}`
			`MaxSessions 2`
			`MaxStartups 5:30:20`