Ansible config for hetzner mailserver

2026-09-17 18:22:54 +02:00 · 2026-03-14 22:24:53 +01:00
parent bc2f75294d
commit 2a3bfb5d1a
30 changed files with 775 additions and 0 deletions
@@ -0,0 +1,38 @@
+Port {{ ssh_port }}
+AddressFamily any
+ListenAddress 0.0.0.0
+ListenAddress ::
+
+# Authentication
+PermitRootLogin {{ ssh_permit_root_login }}
+PasswordAuthentication {{ ssh_password_authentication }}
+ChallengeResponseAuthentication no
+KbdInteractiveAuthentication no
+UsePAM yes
+MaxAuthTries {{ ssh_max_auth_tries }}
+PubkeyAuthentication yes
+AuthorizedKeysFile .ssh/authorized_keys
+
+# Disable unused auth methods
+GSSAPIAuthentication no
+KerberosAuthentication no
+HostbasedAuthentication no
+PermitEmptyPasswords no
+
+# Session
+X11Forwarding no
+PrintMotd no
+TCPKeepAlive yes
+ClientAliveInterval 300
+ClientAliveCountMax 2
+LoginGraceTime 30
+
+# Restrict users
+AllowUsers {{ ssh_allowed_users }}
+
+# Logging
+LogLevel VERBOSE
+SyslogFacility AUTH
+
+# SFTP
+Subsystem sftp /usr/lib/openssh/sftp-server