You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Felix Delattre dc0a412177 License change to AGPLv3 and bring back xamanu.user specific stuff 9 月之前
defaults Use template for config management 2 年之前
handlers Initial commit 2 年之前
meta License change to AGPLv3 and bring back xamanu.user specific stuff 9 月之前
tasks License change to AGPLv3 and bring back xamanu.user specific stuff 9 月之前
templates Use template for config management 2 年之前
tests Apply Ansible Galaxy structure 2 年之前
vars Apply Ansible Galaxy structure 2 年之前
LICENSE License change to AGPLv3 and bring back xamanu.user specific stuff 9 月之前
README.md License change to AGPLv3 and bring back xamanu.user specific stuff 9 月之前

README.md

SSH-Server

This roles sets up a ssh server with its configuration on a Debian (based) system. It is used for the provision setup.

Requirements

One or multiple users must be member of the ssh_login group. Group Membership is not managed by this role.

SSH keys of the authorized users must be present in the ~/.ssh/authorized_keys file. Keys are not managed by this role.

Ansible role xamanu.user may be used to manage a default user with group membership and keys.

Configuration

-* Only connections with ssh key authentication are possible (no password login). -* root access is generally not allowed. -* Only users that are members of the ssh_login group can login through ssh. -* The group can be configured via the secure_ssh_group variable. -* Port is switched from 22 to the indicated value from the ansible variable secure_ssh_port, which can be specified conveniently in the ansible.hosts file. -* A link to download the authorized_keys file for ssh must be specified with the variable ssh_authorized_keys.

This is work in progress and it is prefered to collaborate on it. Please communicate over the issue queue. Every pull request is highly appreciated.

Example Playbook

- hosts: servers
  roles:
     - { role: xamanu.essentials }

You can connect directly with:

-ssh -p YOURPORT user@123.456.789.1

License

AGPLv3

Author Information

Felix Delattre - https://felix.delattre.de