bastion update

2023-06-28 15:48:32 +09:00
parent 90de942c4a
commit e3a240bc41
28 changed files with 649 additions and 13 deletions
--- a/ansible/roles/security-settings/defaults/main.yml
+++ b/ansible/roles/security-settings/defaults/main.yml
@@ -39,5 +39,5 @@ crictl_file_owner: root
 crictl_file_group: root

 # temp
-username: 
-password: 
+username: root
+password: saasadmin1234!@#$
--- a/ansible/roles/security-settings/files/allow_users.conf
+++ b/ansible/roles/security-settings/files/allow_users.conf
@@ -0,0 +1,2 @@
+AllowUsers *@10.20.142.*
+AllowUsers *@10.10.43.*
--- a/ansible/roles/security-settings/tasks/sshd_config.yml
+++ b/ansible/roles/security-settings/tasks/sshd_config.yml
@@ -21,3 +21,12 @@
    group: root
    mode: 0640
  notify: restart sshd
+
+- name: SSH AllowUsers Setting
+  copy:
+    src: allow_users.conf
+    dest: /etc/ssh/sshd_config.d/allow_users.conf
+    owner: root
+    group: root
+    mode: 0644
+