12 Commits (dev)

Author	SHA1	Message	Date
Jérémy Dubois	f0ecc79696	accounts: use "evobsd_internal_group" for SSH authentication	1 year ago
Jérémy Dubois	7b337c2db1	Update README, change needed vars files, edit .gitignore and remove unneeded environment variable	1 year ago
Jérémy Dubois	8a6d16e2dc	Add .gitignore	1 year ago
Jérémy Dubois	7046e193e0	Configure the ntpd.conf file and bump version	2 years ago
Jérémy Dubois	5540aea87d	Add empty vars_files for them not to generate errors	2 years ago
Jérémy Dubois	78686b8730	Stricter ssh and doas access - two separate groups actually needed ... Fix #34 again After some discussions, with actually need two separates groups : - One group for ssh access (evobsd_ssh_group) - One group for sudo/doas access (evobsd_sudo_group) We won't need any client group. A client user will be added to the ssh group, so that we won't have to think about what specific group a user need to be added in.	2 years ago
Jérémy Dubois	2bf8a7e872	Stricter ssh and doas access - better version ... Fix #34 We now use a unique evobsd_group (evolix by default). Each user has 2 groups : evobsd_group and user.name. Only evobsd_group can ssh to server and use doas. I also added a password restrictions block for IPs/group. And we make sure the home folder is only readable by owner.	2 years ago
Patrick Marchand	98089a3274	Fix yaml lint lines too long ... In some cases I used block scalars: https://yaml-multiline.info/ In other cases I added newlines In rare cases I just ignored the rule: https://yamllint.readthedocs.io/en/stable/disable_with_comments.html	3 years ago
Patrick Marchand	af7b3b36fe	Ansible-lint and yamllint ... Does not fix all warnings, but gets rid of the purely cosmetic ones. (roles/accounts/tasks/main.yml)	3 years ago
Patrick Marchand	67d6c0ab62	revert forgotten extra variables in main	4 years ago
Patrick Marchand	8b1ce861e3	Add stricter ssh and doas access	4 years ago
Tristan PILAT	b555fb1222	Add initial project	4 years ago