PPBe/ansible-infra
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

improve ssh security for backup-sync user

Browse Source
This commit is contained in:
HgO
2020-11-30 10:44:48 +01:00
parent d242fcb235
commit 6c898544c0
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/common/templates/openssh/sshd_config.j2
View File

@@ -19,4 +19,6 @@ Subsystem sftp internal-sftp
Match Group {{ backup_group }} Match Group {{ backup_group }}
X11Forwarding no X11Forwarding no
AllowTcpForwarding no AllowTcpForwarding no
ForceCommand rrsync {{ backup_chroot_dir | quote }} AllowAgentForwarding no
PermitTTY no
ForceCommand rrsync -ro {{ backup_chroot_dir | quote }}