From 981b1eff632dc92ec4bb603fda1d55caa6bed8ce Mon Sep 17 00:00:00 2001 From: Egon Rijpkema Date: Wed, 3 Oct 2018 13:45:54 +0200 Subject: [PATCH] Better security for machine that runs horizon. --- ansible.cfg | 1 + group_vars/horizon.yml | 2 ++ horizon.yml | 1 + 3 files changed, 4 insertions(+) create mode 100644 group_vars/horizon.yml diff --git a/ansible.cfg b/ansible.cfg index 2a6df7d..e9735a5 100644 --- a/ansible.cfg +++ b/ansible.cfg @@ -3,3 +3,4 @@ inventory = hosts stdout_callback = debug vault_password_file = .vault_pass.txt forks = 20 +host_key_checking = false diff --git a/group_vars/horizon.yml b/group_vars/horizon.yml new file mode 100644 index 0000000..2d4f7f5 --- /dev/null +++ b/group_vars/horizon.yml @@ -0,0 +1,2 @@ +--- +security_fail2ban_enabled: false diff --git a/horizon.yml b/horizon.yml index 6bd1997..e52a551 100644 --- a/horizon.yml +++ b/horizon.yml @@ -6,4 +6,5 @@ - hosts: horizon become: True roles: + - geerlingguy.security - horizon