test with ssh new ubuntu
This commit is contained in:
@@ -1,139 +1,139 @@
|
||||
---
|
||||
# ---
|
||||
|
||||
|
||||
install_docker: true
|
||||
install_fail2ban: true
|
||||
# install_docker: true
|
||||
# install_fail2ban: true
|
||||
|
||||
package_list:
|
||||
- name: python3-pip
|
||||
- name: proxychains
|
||||
|
||||
|
||||
########
|
||||
# USER #
|
||||
########
|
||||
|
||||
management_user_list:
|
||||
- name: stephane
|
||||
shell: '/bin/bash'
|
||||
authorized_keys:
|
||||
- key: "ssh-rsa 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 stephane"
|
||||
exclusive: yes
|
||||
sudo:
|
||||
hosts: ALL
|
||||
as: ALL
|
||||
commands: ALL
|
||||
nopasswd: ALL
|
||||
|
||||
################
|
||||
# SSH - CLIENT #
|
||||
################
|
||||
|
||||
# ssh_drop_in_name: null
|
||||
# #ssh_user: root
|
||||
|
||||
# ssh:
|
||||
# # noqa var-naming
|
||||
# Compression: true
|
||||
# GSSAPIAuthentication: false
|
||||
# # wokeignore:rule=master
|
||||
# ControlMaster: auto
|
||||
# ControlPath: ~/.ssh/.cm%C
|
||||
# Match:
|
||||
# - Condition: "final all"
|
||||
# GSSAPIAuthentication: true
|
||||
# Host:
|
||||
|
||||
# - Condition: example
|
||||
# Hostname: example.com
|
||||
# User: somebody
|
||||
# ssh_ForwardX11: false
|
||||
|
||||
#################
|
||||
# SSH - SERVEUR #
|
||||
#################
|
||||
|
||||
sshd_skip_defaults: true
|
||||
sshd_config_file: /etc/ssh/sshd_config
|
||||
|
||||
sshd_AuthorizedKeysFile: .ssh/authorized_keys
|
||||
sshd_AcceptEnv: "LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION LC_ALL"
|
||||
sshd_Protocol: 2
|
||||
sshd_LoginGraceTime: 30
|
||||
sshd_SyslogFacility: AUTH
|
||||
sshd_LogLevel: VERBOSE
|
||||
sshd_PermitRootLogin: 'no'
|
||||
sshd_StrictModes: 'yes'
|
||||
sshd_IgnoreRhosts: 'yes'
|
||||
sshd_HostbasedAuthentication: 'no'
|
||||
sshd_PasswordAuthentication: 'no'
|
||||
sshd_PermitEmptyPasswords: 'no'
|
||||
sshd_ChallengeResponseAuthentication: 'no'
|
||||
sshd_GSSAPIAuthentication: 'no'
|
||||
sshd_X11DisplayOffset: 10
|
||||
sshd_PrintMotd: 'yes'
|
||||
sshd_PrintLastLog: 'yes'
|
||||
sshd_TCPKeepAlive: 'yes'
|
||||
sshd_Subsystem: "sftp /usr/lib/openssh/sftp-server"
|
||||
sshd_UsePAM: 'yes'
|
||||
sshd_UseDNS: 'no'
|
||||
sshd_KexAlgorithms: "curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256"
|
||||
sshd_Ciphers: "chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr"
|
||||
sshd_MACs: "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com"
|
||||
sshd_HostKey:
|
||||
- /etc/ssh/ssh_host_rsa_key
|
||||
|
||||
|
||||
#######
|
||||
# APT #
|
||||
#######
|
||||
|
||||
apt_upgrade: true
|
||||
apt_repositories: []
|
||||
apt_ppas: []
|
||||
# # nginx ppa repo
|
||||
# - repo: ppa:nginx/stable
|
||||
# # not needed on ubuntu distribution
|
||||
# #codename: trusty
|
||||
# apt_packages:
|
||||
# package_list:
|
||||
# - name: python3-pip
|
||||
# - name: proxychains
|
||||
|
||||
|
||||
#########
|
||||
# ALERT #
|
||||
#########
|
||||
# ########
|
||||
# # USER #
|
||||
# ########
|
||||
|
||||
alert_username: jingohalert
|
||||
alert_password: jMVmbM2VQ5gEiV
|
||||
alert_vault: "Jingoh0947;"
|
||||
alert_list_server:
|
||||
- '"163.172.84.28"'
|
||||
- '"37.187.127.90"'
|
||||
alert_server_ssl: gitea.jingoh.fr
|
||||
# management_user_list:
|
||||
# - name: stephane
|
||||
# shell: '/bin/bash'
|
||||
# authorized_keys:
|
||||
# - key: "ssh-rsa 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 stephane"
|
||||
# exclusive: yes
|
||||
# sudo:
|
||||
# hosts: ALL
|
||||
# as: ALL
|
||||
# commands: ALL
|
||||
# nopasswd: ALL
|
||||
|
||||
##########
|
||||
# CHISEL #
|
||||
##########
|
||||
# ################
|
||||
# # SSH - CLIENT #
|
||||
# ################
|
||||
|
||||
chisel_version: 1.8.1
|
||||
chisel_server_host: 163.172.84.28
|
||||
chisel_server_port: 8080
|
||||
chisel_client_auth_username: user
|
||||
chisel_client_auth_password: pass
|
||||
# # ssh_drop_in_name: null
|
||||
# # #ssh_user: root
|
||||
|
||||
chisel_remove_all:
|
||||
- "{{ chisel_service_destination }}"
|
||||
- "{{ chisel_config_folder }}"
|
||||
- "{{ chisel_download_destination }}"
|
||||
- "{{ chisel_install_destination }}"
|
||||
- /var/log/chisel
|
||||
# # ssh:
|
||||
# # # noqa var-naming
|
||||
# # Compression: true
|
||||
# # GSSAPIAuthentication: false
|
||||
# # # wokeignore:rule=master
|
||||
# # ControlMaster: auto
|
||||
# # ControlPath: ~/.ssh/.cm%C
|
||||
# # Match:
|
||||
# # - Condition: "final all"
|
||||
# # GSSAPIAuthentication: true
|
||||
# # Host:
|
||||
|
||||
# # - Condition: example
|
||||
# # Hostname: example.com
|
||||
# # User: somebody
|
||||
# # ssh_ForwardX11: false
|
||||
|
||||
# #################
|
||||
# # SSH - SERVEUR #
|
||||
# #################
|
||||
|
||||
# sshd_skip_defaults: true
|
||||
# sshd_config_file: /etc/ssh/sshd_config
|
||||
|
||||
# sshd_AuthorizedKeysFile: .ssh/authorized_keys
|
||||
# sshd_AcceptEnv: "LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION LC_ALL"
|
||||
# sshd_Protocol: 2
|
||||
# sshd_LoginGraceTime: 30
|
||||
# sshd_SyslogFacility: AUTH
|
||||
# sshd_LogLevel: VERBOSE
|
||||
# sshd_PermitRootLogin: 'no'
|
||||
# sshd_StrictModes: 'yes'
|
||||
# sshd_IgnoreRhosts: 'yes'
|
||||
# sshd_HostbasedAuthentication: 'no'
|
||||
# sshd_PasswordAuthentication: 'no'
|
||||
# sshd_PermitEmptyPasswords: 'no'
|
||||
# sshd_ChallengeResponseAuthentication: 'no'
|
||||
# sshd_GSSAPIAuthentication: 'no'
|
||||
# sshd_X11DisplayOffset: 10
|
||||
# sshd_PrintMotd: 'yes'
|
||||
# sshd_PrintLastLog: 'yes'
|
||||
# sshd_TCPKeepAlive: 'yes'
|
||||
# sshd_Subsystem: "sftp /usr/lib/openssh/sftp-server"
|
||||
# sshd_UsePAM: 'yes'
|
||||
# sshd_UseDNS: 'no'
|
||||
# sshd_KexAlgorithms: "curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256"
|
||||
# sshd_Ciphers: "chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr"
|
||||
# sshd_MACs: "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com"
|
||||
# sshd_HostKey:
|
||||
# - /etc/ssh/ssh_host_rsa_key
|
||||
|
||||
|
||||
# #######
|
||||
# # APT #
|
||||
# #######
|
||||
|
||||
# apt_upgrade: true
|
||||
# apt_repositories: []
|
||||
# apt_ppas: []
|
||||
# # # nginx ppa repo
|
||||
# # - repo: ppa:nginx/stable
|
||||
# # # not needed on ubuntu distribution
|
||||
# # #codename: trusty
|
||||
# # apt_packages:
|
||||
# # - name: python3-pip
|
||||
|
||||
|
||||
# #########
|
||||
# # ALERT #
|
||||
# #########
|
||||
|
||||
# alert_username: jingohalert
|
||||
# alert_password: jMVmbM2VQ5gEiV
|
||||
# alert_vault: "Jingoh0947;"
|
||||
# alert_list_server:
|
||||
# - '"163.172.84.28"'
|
||||
# - '"37.187.127.90"'
|
||||
# alert_server_ssl: gitea.jingoh.fr
|
||||
|
||||
# ##########
|
||||
# # CHISEL #
|
||||
# ##########
|
||||
|
||||
# chisel_version: 1.8.1
|
||||
# chisel_server_host: 163.172.84.28
|
||||
# chisel_server_port: 8080
|
||||
# chisel_client_auth_username: user
|
||||
# chisel_client_auth_password: pass
|
||||
|
||||
# chisel_remove_all:
|
||||
# - "{{ chisel_service_destination }}"
|
||||
# - "{{ chisel_config_folder }}"
|
||||
# - "{{ chisel_download_destination }}"
|
||||
# - "{{ chisel_install_destination }}"
|
||||
# - /var/log/chisel
|
||||
|
||||
|
||||
|
||||
test_vault: !vault |
|
||||
$ANSIBLE_VAULT;1.2;AES256;prod
|
||||
36663965646236326237623936646161653232306263353564666238626564633530363761633164
|
||||
6166363235383964626463353061343635626431396664660a333231303661343362353162353938
|
||||
32373332373362656635393365363635313137306532366536323765346464336634653366383961
|
||||
3965626433316138320a366336393034383065363134623239646230396432356431383935346463
|
||||
6330
|
||||
# test_vault: !vault |
|
||||
# $ANSIBLE_VAULT;1.2;AES256;prod
|
||||
# 36663965646236326237623936646161653232306263353564666238626564633530363761633164
|
||||
# 6166363235383964626463353061343635626431396664660a333231303661343362353162353938
|
||||
# 32373332373362656635393365363635313137306532366536323765346464336634653366383961
|
||||
# 3965626433316138320a366336393034383065363134623239646230396432356431383935346463
|
||||
# 6330
|
||||
|
||||
Reference in New Issue
Block a user