andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add ssh_pubkey_authentication variable (#749)

Browse Source 
Signed-off-by: debbabi <[email protected]>
This commit is contained in:
debbabi authored and GitHub committed 2024-03-20 13:24:27 +01:00
1 parent b35b82108b
commit 00443de508
3 files changed
+9 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/ssh_hardening/templates/opensshd.conf.j2
+1 -1
View File
@@ -112,7 +112,7 @@ MaxSessions {{ ssh_max_sessions }}
MaxStartups {{ ssh_max_startups }}
# Enable public key authentication
PubkeyAuthentication yes
PubkeyAuthentication {{ 'yes' if (ssh_pubkey_authentication|bool) else 'no' }}
# Never use host-based authentication. It can be exploited.
IgnoreRhosts yes