Timotej Lazar
25bcddede1
Consolidate base system and networking setup into debian role and BGP configuration into frr role. Add facts role to collect data from NetBox once to avoid many slow lookups. Also many other tweaks and cleanups.
15 lines
347 B
Plaintext
15 lines
347 B
Plaintext
# This is for sshd in management VRF, for ansible and other not-really-OOB stuff.
|
|
PidFile none
|
|
UsePAM no
|
|
Subsystem sftp /usr/lib/openssh/sftp-server
|
|
|
|
# Only allow pubkey auth.
|
|
KbdInteractiveAuthentication no
|
|
PasswordAuthentication no
|
|
PermitRootLogin prohibit-password
|
|
|
|
# Disable what we can.
|
|
AllowTcpForwarding no
|
|
GatewayPorts no
|
|
X11Forwarding no
|