T

mrcharles cefe2f7cfa feat(security): add SSH hardening role

Port Modules/Security/secharden-ssh.sh.

Deploys:
- Authorized keys for root, localuser, subodev (conditional on existence)
- Hardened /etc/ssh/sshd_config (skipped on dev workstations)
- ssh-audit hardening drop-in for algorithm restrictions (skipped on
  Ubuntu where it breaks openssh-server)
- Lockdown of sshd_config.d directory permissions

SSH service is validated (sshd -t) before restart.

🤖 Generated with [Crush](https://github.com/charmassociates/crush)

Assisted-by: GLM-5 via Crush <crush@charm.land>

2026-07-30 12:16:13 -05:00

inventory

feat(inventory): add fleet inventory with all host groups

2026-07-30 12:15:36 -05:00

playbooks

feat(playbooks): add hello world and setup new system playbooks

2026-07-30 12:15:43 -05:00

roles

feat(security): add SSH hardening role

2026-07-30 12:16:13 -05:00

.ansible-lint

chore: add Ansible project scaffolding