rc/servers
4
0
Fork 2
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Import firewall role from network repo

Browse source 
Move, actually.
This commit is contained in:
Timotej Lazar 2026-02-23 09:56:33 +01:00
parent 88061d97b2
commit 754c3da31f
21 changed files with 801 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
roles/firewall/files/sshd_config.friwall Normal file
View file

@ -0,0 +1,15 @@
# This is used by sshd in default VRF to receive configuration updates. Lock
# down to only allow executing the update script.
# Only allow pubkey auth.
KbdInteractiveAuthentication no
PasswordAuthentication no
PermitRootLogin prohibit-password
# Disable what we can.
AllowTcpForwarding no
GatewayPorts no
X11Forwarding no
# And then disable everything else.
ForceCommand /usr/local/bin/update