Merge pull request #112 from konstruktoid/ssh

dont use AllowUsers by default
konstruktoid · Oct 10, 2023 · 5343f33 · 5343f33
2 parents 84b9e9a + d779624
commit 5343f33
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/config/local.yml b/config/local.yml
@@ -12,7 +12,7 @@
     - name: Checkout konstruktoid.hardening
       become: true
       ansible.builtin.git:
-        repo: 'https://github.com/konstruktoid/ansible-role-hardening'
+        repo: https://github.com/konstruktoid/ansible-role-hardening
         dest: /etc/ansible/roles/konstruktoid.hardening
         version: master
 
@@ -30,10 +30,10 @@
         block_blacklisted: false
         install_aide: false
         sshd_admin_net: "0.0.0.0/0"
-        sshd_allow_groups: "ubuntu vagrant"
+        sshd_allow_groups: ubuntu vagrant
+        sshd_allow_users: false
         sshd_login_grace_time: 60
         sshd_max_auth_tries: 10
         sshd_use_dns: "no"
         sshd_permit_root_login: "no"
         suid_sgid_permissions: false
-...