flock/roles/setup_sshd/tasks/main.yml
2025-06-25 14:17:59 +08:00

39 lines
1.1 KiB
YAML

- name: Add SSH Key - muskduck
tags:
- ssh_keys
ansible.posix.authorized_key:
user: fern
state: present
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGp2OX16VJ+G8cE5hjt2vLc8teUpE+EaN2YmEqqMx/j9 fern@muskduck"
- name: Add SSH Key - pardalote
tags:
- ssh_keys
ansible.posix.authorized_key:
user: fern
state: present
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKzW4epTmK01kGVXcuAXUNJQPltnogf4uab9FA5m8S3n fern@pardalote"
- name: Add SSH Key - fairywren
tags:
- ssh_keys
ansible.posix.authorized_key:
user: fern
state: present
key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBEJYq1fMxVOzCMfE/td6DtWS8nUk76U9seYD3Z9RYAz u0_a399@fairywren"
- name: Add SSH Key - YubiKey
tags:
- ssh_keys
ansible.posix.authorized_key:
user: fern
state: present
key: "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIMoJvPcUJDVVzO4dHROCFNlgJdDZSP5xyPx2s40zcx5QAAAABHNzaDo= YubiKey5NFC"
- name: Disable root login
become: true
lineinfile:
path: /etc/ssh/sshd_config
regexp: "^PermitRootLogin"
line: "PermitRootLogin no"
backup: yes