boma/roles/base/molecule/default
sjat a111a20cc8 test(base): Molecule coverage for ssh hardening + fail2ban
Add explicit base__ssh_authorised_keys: [] default to prevent
undefined-var errors in Molecule. Extend verify.yml with sshd
drop-in validation, PasswordAuthentication check, and fail2ban
jail assertion. Pre-create /run/sshd in ssh.yml so sshd -t
works in containers before the service has ever started.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-14 16:47:42 +02:00
..
converge.yml feat(base): add ssh-from-control management-plane source (ADR-021) 2026-06-09 17:43:55 +02:00
molecule.yml fix(base): iifname for load-time safety; zone-source molecule fixture 2026-06-06 19:02:50 +02:00
verify.yml test(base): Molecule coverage for ssh hardening + fail2ban 2026-06-14 16:47:42 +02:00