One thing this blog doesn’t get into is probably the one thing I struggled with for the longest time. Maybe it’ll come in the next part, but how are people setting up their authentication/access to their hosts? Are you using root and allowing root over ssh? Maybe you’re limiting subnets in sshd_config? Maybe a separate local account named something like “ansible?” With full sudo permissions and nopasswd?
How are people properly hardening this account? I would love to hear how others are doing this because every time I think about our implementation, it just feels wrong.
How are people properly hardening this account? I would love to hear how others are doing this because every time I think about our implementation, it just feels wrong.