jack
a344998405
- Add uptime_kuma_image to image pull loop in services/tasks/main.yml - Add logrotate deploy task to services/tasks/configs.yml - Add logrotate package to base_packages Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
25 lines
416 B
YAML
25 lines
416 B
YAML
---
|
|
# SSH hardening
|
|
sshd_port: 22
|
|
sshd_permit_root_login: "no"
|
|
sshd_password_authentication: "no"
|
|
sshd_pubkey_authentication: "yes"
|
|
sshd_x11_forwarding: "no"
|
|
sshd_max_auth_tries: 3
|
|
sshd_client_alive_interval: 300
|
|
sshd_client_alive_count_max: 2
|
|
|
|
# Packages to install
|
|
base_packages:
|
|
- ufw
|
|
- fail2ban
|
|
- curl
|
|
- wget
|
|
- git
|
|
- htop
|
|
- vim
|
|
- unzip
|
|
- ca-certificates
|
|
- gnupg
|
|
- lsb-release
|
|
- logrotate
|