Compare commits
	
		
			2 commits
		
	
	
		
			6482f3864f
			...
			b1c878d248
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 
							 | 
						b1c878d248 | ||
| 
							 | 
						4197acd2ce | 
					 4 changed files with 8 additions and 0 deletions
				
			
		| 
						 | 
					@ -2,5 +2,9 @@
 | 
				
			||||||
all:
 | 
					all:
 | 
				
			||||||
  vars:
 | 
					  vars:
 | 
				
			||||||
    domain: "{{ ansible_domain }}"
 | 
					    domain: "{{ ansible_domain }}"
 | 
				
			||||||
 | 
					    security_defaultuser_login_disable: false
 | 
				
			||||||
 | 
					    kde_desktop_pkg:
 | 
				
			||||||
 | 
					      - akonadi-backend-sqlite
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  hosts:
 | 
					  hosts:
 | 
				
			||||||
    localhost:
 | 
					    localhost:
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -55,6 +55,7 @@
 | 
				
			||||||
    - role: lmn_vm
 | 
					    - role: lmn_vm
 | 
				
			||||||
      when: vm_support
 | 
					      when: vm_support
 | 
				
			||||||
    - lmn_printer
 | 
					    - lmn_printer
 | 
				
			||||||
 | 
					      when: printservers is defined
 | 
				
			||||||
    - kerberize
 | 
					    - kerberize
 | 
				
			||||||
    - lmn_misc
 | 
					    - lmn_misc
 | 
				
			||||||
    - role: lmn_localproxy
 | 
					    - role: lmn_localproxy
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
							
								
								
									
										2
									
								
								roles/lmn_security/defaults/main.yml
									
										
									
									
									
										Normal file
									
								
							
							
						
						
									
										2
									
								
								roles/lmn_security/defaults/main.yml
									
										
									
									
									
										Normal file
									
								
							| 
						 | 
					@ -0,0 +1,2 @@
 | 
				
			||||||
 | 
					---
 | 
				
			||||||
 | 
					security_defaultuser_login_disable: true
 | 
				
			||||||
| 
						 | 
					@ -18,6 +18,7 @@
 | 
				
			||||||
  ansible.builtin.user:
 | 
					  ansible.builtin.user:
 | 
				
			||||||
    name: ansible
 | 
					    name: ansible
 | 
				
			||||||
    password_lock: true
 | 
					    password_lock: true
 | 
				
			||||||
 | 
					  when: security_defaultuser_login_disable
 | 
				
			||||||
 | 
					
 | 
				
			||||||
- name: Limit SSH access to user ansible
 | 
					- name: Limit SSH access to user ansible
 | 
				
			||||||
  ansible.builtin.blockinfile:
 | 
					  ansible.builtin.blockinfile:
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
	Add table
		
		Reference in a new issue