feat(security): tightened files mode for ssh configuration and enabled ipv6 on ssh, along with an increase on max sessions from 3 to 5

2024-08-08 00:00:00 +00:00 · 2024-08-08 00:00:00 +00:00 · b7ba39bce9
commit b7ba39bce9
parent 3acdd804df
2 changed files with 6 additions and 6 deletions
--- a/collections/ansible_collections/nullified/infrastructure/roles/security/templates/openssh-server/sshd_config.j2
+++ b/collections/ansible_collections/nullified/infrastructure/roles/security/templates/openssh-server/sshd_config.j2
@ -1,14 +1,14 @@
 AcceptEnv                       LANG LC_*
-AddressFamily                   inet
+AddressFamily                   any
 AllowAgentForwarding            no
 ChallengeResponseAuthentication no
 ClientAliveCountMax             2
 ClientAliveInterval             300
 HostKey                         /etc/ssh/ssh_host_ed25519_key
 IgnoreRhosts                    yes
-LogLevel                        VERBOSE
+LogLevel                        INFO
 MaxAuthTries                    3
-MaxSessions                     3
+MaxSessions                     5
 PermitEmptyPasswords            no
 PermitRootLogin                 no
 PrintMotd                       yes