fix(cleanup,config): xen tmp cleanup, tpm2 fallback warning, add code comments

2026-02-22 01:59:01 +01:00
parent dc5aa5077e
commit 4efd64664d
5 changed files with 17 additions and 5 deletions
--- a/roles/configuration/tasks/ssh.yml
+++ b/roles/configuration/tasks/ssh.yml
@@ -1,4 +1,6 @@
 ---
+# Bootstrap-only: permissive SSH for initial Ansible access.
+# Post-bootstrap hardening (key-only, no root login) is handled by the linux role.
 - name: Ensure SSH password authentication is enabled
  ansible.builtin.lineinfile:
    path: /mnt/etc/ssh/sshd_config