Disallow ssh passwords

2020-12-13 15:25:21 +01:00 · 2020-12-13 15:25:21 +01:00 · c266a55213
parent e9f1d800a1
commit c266a55213
2 changed files with 7 additions and 0 deletions
--- a/roles/ubuntu_base/tasks/main.yml
+++ b/roles/ubuntu_base/tasks/main.yml
@ -2,3 +2,4 @@
 - import_tasks: upgrade.yml
 - import_tasks: base.yml
 - import_tasks: users.yml
+- import_tasks: sshd.yml
--- a/roles/ubuntu_base/tasks/sshd.yml
+++ b/roles/ubuntu_base/tasks/sshd.yml
@ -0,0 +1,6 @@
+---
+- name: Disallow ssh password login
+  lineinfile:
+    path: /etc/ssh/sshd_config
+    line: "PasswordAuthentication no"
+    regexp: "^#?PasswordAuthentication "