init commit

2025-07-21 14:26:07 -05:00
commit 6a683a7a38
25 changed files with 635 additions and 0 deletions
--- a/playbooks/templates/sshd/00-global.conf.j2
+++ b/playbooks/templates/sshd/00-global.conf.j2
@@ -0,0 +1,25 @@
+Port 22
+AddressFamily inet
+PermitRootLogin no
+
+PasswordAuthentication no
+KbdInteractiveAuthentication no
+ChallengeResponseAuthentication no
+PermitEmptyPasswords no
+
+UsePAM yes
+AllowGroups {{ ssh_access_group | default('sshusers') }}
+
+PubkeyAuthentication yes
+AuthorizedKeysFile .ssh/authorized_keys
+
+X11Forwarding no
+PrintMotd no
+PrintLastLog yes
+
+LoginGraceTime 30s
+MaxAuthTries 3
+MaxSessions 2
+
+AcceptEnv LANG LC_*
+Subsystem sftp /usr/lib/openssh/sftp-server