summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2022-08-09 11:20:08 +0300
committerLars Wirzenius <liw@liw.fi>2022-08-09 11:20:08 +0300
commitb5d03058976a789eb02a368b6a77068a9fa8782d (patch)
tree3abd76d8a40daad532f83a203308eaa72f6bb6fe
parentef3b36a6b9881b716717bd74b5d61ff06d7ecd51 (diff)
downloadansibleness-b5d03058976a789eb02a368b6a77068a9fa8782d.tar.gz
obnam-dev: don't allow SSH authorized_keys files
Sponsored-by: author
-rw-r--r--ansible/obnam-dev.yml5
1 files changed, 5 insertions, 0 deletions
diff --git a/ansible/obnam-dev.yml b/ansible/obnam-dev.yml
index 917e296..a64d4f4 100644
--- a/ansible/obnam-dev.yml
+++ b/ansible/obnam-dev.yml
@@ -4,6 +4,8 @@
roles:
- role: sane_debian_system
tags: [sane]
+ - role: sshd
+ tags: [sshd]
- role: comfortable-debian-system
tags: [comfy]
- role: version-controller
@@ -63,3 +65,6 @@
comment: Lars Wirzenius
rustup_cargo_install: |
flamegraph
+
+ sshd_version: 1
+ sshd_allow_authorized_keys: no