- Add infra_controller role to provision a dedicated user\n- Install register/deregister forced-command authorized_keys entries\n- Read SSH public keys from vault/env and restrict access by source IP
6 lines
156 B
YAML
6 lines
156 B
YAML
---
|
|
service_ssh_user: infra_controller
|
|
service_ssh_allowed_host: web
|
|
service_ssh_allowed_ip: ""
|
|
service_ssh_register_key: ""
|
|
service_ssh_deregister_key: ""
|