boma/roles/base/tasks
sjat a111a20cc8 test(base): Molecule coverage for ssh hardening + fail2ban
Add explicit base__ssh_authorised_keys: [] default to prevent
undefined-var errors in Molecule. Extend verify.yml with sshd
drop-in validation, PasswordAuthentication check, and fail2ban
jail assertion. Pre-create /run/sshd in ssh.yml so sshd -t
works in containers before the service has ever started.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-14 16:47:42 +02:00
..
fail2ban.yml feat(base): ssh hardening + fail2ban (hardening concern, ADR-002) 2026-06-14 16:42:56 +02:00
firewall.yml fix(base): make rollback snapshot restorable (flush-prefixed) 2026-06-06 19:15:38 +02:00
main.yml feat(base): ssh hardening + fail2ban (hardening concern, ADR-002) 2026-06-14 16:42:56 +02:00
ssh.yml test(base): Molecule coverage for ssh hardening + fail2ban 2026-06-14 16:47:42 +02:00