25 lines
591 B
YAML
25 lines
591 B
YAML
---
|
|
- name: Disable root authentication
|
|
ansible.builtin.replace:
|
|
path: /etc/ssh/sshd_config
|
|
regexp: '#PermitRootLogin prohibit-password'
|
|
replace: 'PermitRootLogin no'
|
|
|
|
- name: Disable X11 forwarding
|
|
ansible.builtin.replace:
|
|
path: /etc/ssh/sshd_config
|
|
regexp: 'X11Forwarding yes'
|
|
replace: 'X11Forwarding no'
|
|
|
|
- name: Explicitly only listen on ipv4
|
|
ansible.builtin.replace:
|
|
path: /etc/ssh/sshd_config
|
|
regexp: '#AddressFamily any'
|
|
replace: 'AddressFamily inet'
|
|
|
|
- name: "Restart sshd"
|
|
ansible.builtin.service:
|
|
name: sshd
|
|
state: restarted
|
|
...
|