Daniel Allaire
ef39f4352f
Les fichiers geres par les roles (99-chezlepro.conf, chezlepro_filter, chezlepro-bind.conf, /etc/redis/chezlepro.conf...) et les 14 templates correspondants passent a la marque neutre du moteur 'setops' (git mv + references src/dest). Un loup ne deploie plus de fichiers marques chezlepro. Coherence src <-> template verifiee, ansible-lint 0 echec, diff vide, syntax-check des playbooks de groupes OK. READMEs laisses (exemples). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
27 lines
854 B
Django/Jinja
27 lines
854 B
Django/Jinja
# Managed by Ansible — Set-OPS
|
|
|
|
Port {{ ssh_hardening_port }}
|
|
PermitRootLogin {{ ssh_hardening_permit_root_login }}
|
|
PubkeyAuthentication {{ ssh_hardening_pubkey_authentication }}
|
|
PasswordAuthentication {{ ssh_hardening_password_authentication }}
|
|
AuthenticationMethods publickey
|
|
KbdInteractiveAuthentication no
|
|
ChallengeResponseAuthentication no
|
|
PermitEmptyPasswords no
|
|
HostbasedAuthentication no
|
|
IgnoreRhosts yes
|
|
X11Forwarding no
|
|
AllowTcpForwarding no
|
|
AllowAgentForwarding no
|
|
AllowStreamLocalForwarding no
|
|
PermitTunnel no
|
|
GatewayPorts no
|
|
PermitUserEnvironment no
|
|
PermitTTY yes
|
|
TCPKeepAlive no
|
|
ClientAliveInterval {{ ssh_hardening_client_alive_interval }}
|
|
ClientAliveCountMax {{ ssh_hardening_client_alive_count_max }}
|
|
MaxAuthTries {{ ssh_hardening_max_auth_tries }}
|
|
LoginGraceTime {{ ssh_hardening_login_grace_time }}
|
|
MaxSessions 2
|
|
MaxStartups 5:30:20
|