25 lines
654 B
YAML
25 lines
654 B
YAML
---
|
|
- hosts:
|
|
- tmp.kevinnlsamuel.com
|
|
vars:
|
|
ansible_user: root
|
|
name: setup server natsuco
|
|
tasks:
|
|
- name: harden ssh
|
|
block:
|
|
- name: disable password auth
|
|
file:
|
|
src: sshd/00-nopasswd.conf
|
|
dest: /etc/ssh/ssh_config.d/00-altport.conf
|
|
- name: change ssh port
|
|
vars:
|
|
port: 1023
|
|
template:
|
|
src: sshd/00-altport.conf
|
|
dest: /etc/ssh/ssh_config.d/00-altport.conf
|
|
- name: install semanage
|
|
dnf:
|
|
state: present
|
|
name: policycoreutils-python-utils
|
|
- command: /usr/sbin/semanage port -a -t ssh_port_t -p tcp 1023
|