Deconsolidate network setup for proxmox and debian roles

They are just different enough to be annoying.
This commit is contained in:
Timotej Lazar 2024-08-28 12:37:41 +02:00
parent c3d1a6c4b1
commit 211d4bdb9a
10 changed files with 104 additions and 19 deletions

14
files/sshd_config.mgmt Normal file
View file

@ -0,0 +1,14 @@
# This is for sshd in management VRF, for ansible and other not-really-OOB stuff.
PidFile none
UsePAM no
Subsystem sftp /usr/lib/openssh/sftp-server
# Only allow pubkey auth.
KbdInteractiveAuthentication no
PasswordAuthentication no
PermitRootLogin prohibit-password
# Disable what we can.
AllowTcpForwarding no
GatewayPorts no
X11Forwarding no