Improve comment

ivov · Feb 2, 2025 · f05f82d · f05f82d
1 parent 4942876
commit f05f82d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/infrastructure/02-configure/01-user-setup.yml b/infrastructure/02-configure/01-user-setup.yml
@@ -48,13 +48,13 @@
       lineinfile:
         path: /etc/ssh/sshd_config
         regexp: "^#?PermitRootLogin"
-        line: "PermitRootLogin no" # disable login for root (even with SSH)
+        line: "PermitRootLogin no" # disable SSH login for root
 
     - name: Disable password authentication for SSH
       lineinfile:
         path: /etc/ssh/sshd_config
         regexp: "^#?PasswordAuthentication"
-        line: "PasswordAuthentication no" # allow only SSH login for remaining users
+        line: "PasswordAuthentication no" # enforce key-based auth for SSH for all users
 
     - name: Restart SSH service
       service: