This commit is contained in:
kekskurse 2025-07-24 14:34:48 +02:00
parent 9fabdcca38
commit edcf7ab0e4
2 changed files with 33 additions and 0 deletions

View file

@ -0,0 +1,32 @@
#cloud-config
users:
- name: soeren
groups: users, admin
sudo: ALL=(ALL) NOPASSWD:ALL
shell: /bin/bash
ssh_import_id:
- gh:kekskurse
- name: cloud
groups: users, admin
sudo: ALL=(ALL) NOPASSWD:ALL
shell: /bin/bash
ssh_import_id:
- gh:kekskurse
packages:
- ufw
package_update: true
package_upgrade: true
runcmd:
- ufw allow 22522
- ufw enable
- sed -i -e '/^\(#\|\)PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)PasswordAuthentication/s/^.*$/PasswordAuthentication no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)KbdInteractiveAuthentication/s/^.*$/KbdInteractiveAuthentication no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)ChallengeResponseAuthentication/s/^.*$/ChallengeResponseAuthentication no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)MaxAuthTries/s/^.*$/MaxAuthTries 5/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)AllowTcpForwarding/s/^.*$/AllowTcpForwarding no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)X11Forwarding/s/^.*$/X11Forwarding no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)AllowAgentForwarding/s/^.*$/AllowAgentForwarding no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)AuthorizedKeysFile/s/^.*$/AuthorizedKeysFile .ssh\/authorized_keys/' /etc/ssh/sshd_config
- sed -i 's/^#Port 22/Port 22522/' /etc/ssh/sshd_config
- reboot

View file

@ -26,6 +26,7 @@
- ncdu - ncdu
- msmtp - msmtp
- msmtp-mta - msmtp-mta
- gcc
- name: Remove "neovim" package - name: Remove "neovim" package
ansible.builtin.apt: ansible.builtin.apt: