mrwho/ansible-bootstrap-rocky9
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ansible-bootstrap-rocky9/roles/linux_ssh_hardening_rhel9/README.md
mrwho 2c6d0394a1 update
2026-05-12 00:21:37 +03:00

485 B
Raw Permalink Blame History

linux_ssh_hardening_rhel9

Purpose

Applies deep SSH server hardening by enforcing strong ciphers, MACs, key exchange algorithms, authentication restrictions, and login banners to minimize SSH attack exposure.

Targeted OS

RHEL 9 / AlmaLinux 9 / Rocky Linux 9

CIS Alignment

CIS Section 5.1 — Configure SSH Server

Key Variables

linux_ssh_hardening_rhel9_disabled: false   # set to true to skip this role

See defaults/main.yml for all tunable parameters.