sjat cff368ece2 docs(spec,plan): M3 — base ssh hardening + fail2ban ... ADR-002 baseline (key-only, no root, fail2ban 5/1h) as two base task files under the existing 'hardening' concern tag; applied to askari by tag (NOT the host firewall — that's mesh-gated to avoid lockout; Hetzner Cloud Firewall is the perimeter until M5). NetBird agent deferred to M4. Adds a LIMIT=/TAGS= passthrough to make check/deploy. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 16:38:38 +02:00
..
plans	docs(spec,plan): M3 — base ssh hardening + fail2ban	2026-06-14 16:38:38 +02:00
specs	docs(spec,plan): M3 — base ssh hardening + fail2ban	2026-06-14 16:38:38 +02:00