From f05f82dd8a428e9d0ca916636eb109dffd20dad8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Iv=C3=A1n=20Ovejero?= Date: Sun, 2 Feb 2025 14:27:40 +0100 Subject: [PATCH] Improve comment --- infrastructure/02-configure/01-user-setup.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/infrastructure/02-configure/01-user-setup.yml b/infrastructure/02-configure/01-user-setup.yml index 1f503e8..ad03c6b 100644 --- a/infrastructure/02-configure/01-user-setup.yml +++ b/infrastructure/02-configure/01-user-setup.yml @@ -48,13 +48,13 @@ lineinfile: path: /etc/ssh/sshd_config regexp: "^#?PermitRootLogin" - line: "PermitRootLogin no" # disable login for root (even with SSH) + line: "PermitRootLogin no" # disable SSH login for root - name: Disable password authentication for SSH lineinfile: path: /etc/ssh/sshd_config regexp: "^#?PasswordAuthentication" - line: "PasswordAuthentication no" # allow only SSH login for remaining users + line: "PasswordAuthentication no" # enforce key-based auth for SSH for all users - name: Restart SSH service service: