T

mrcharles 703053430c feat(security): add two-factor authentication role

Port Modules/Security/secharden-2fa.sh.

Configures TOTP two-factor authentication via Google Authenticator for:
- SSH (publickey + keyboard-interactive)
- Cockpit web interface (PAM with Google Authenticator)
- Webmin (if installed, TOTP provider enabled)

Includes:
- Backup of existing SSH, PAM, and Cockpit configs before changes
- PAM sshd and cockpit config deployment
- Per-user enrollment scaffolding (setup script + instructions for
  root and localuser)
- SSH service validation before restart

🤖 Generated with [Crush](https://github.com/charmassociates/crush)

Assisted-by: GLM-5 via Crush <crush@charm.land>

2026-07-30 12:16:32 -05:00

inventory

feat(inventory): add fleet inventory with all host groups

2026-07-30 12:15:36 -05:00

playbooks

feat(playbooks): add hello world and setup new system playbooks

2026-07-30 12:15:43 -05:00

roles

feat(security): add two-factor authentication role

2026-07-30 12:16:32 -05:00

.ansible-lint

chore: add Ansible project scaffolding