|
|
f74ec325ea
|
refactor(cis): extract hardcoded values to cis_defaults and add _normalize.yml
|
2026-02-21 01:26:31 +01:00 |
|
|
|
c837a52a24
|
refactor(cis): remove redundant AllowUsers/AllowGroups/DenyUsers/DenyGroups from sshd
|
2026-02-21 00:38:52 +01:00 |
|
|
|
041650c287
|
refactor: add loop_control labels to dict-based loops across all roles
|
2026-02-20 23:00:53 +01:00 |
|
|
|
65c5b1029b
|
fix(cis): add pipefail to sshd version detection and define binary defaults
|
2026-02-20 22:24:14 +01:00 |
|
|
|
21bf8f79e2
|
fix(cis): make mlkem768x25519-sha256 KexAlgorithm conditional on OpenSSH 9.9+
|
2026-02-20 21:50:58 +01:00 |
|
|
|
524356cf8d
|
fix(cis): remove deprecated sshd options and update hardening values
|
2026-02-20 20:17:52 +01:00 |
|
|
|
fc05708466
|
refactor(vars): add system/hypervisor dict inputs
|
2026-02-11 05:37:18 +01:00 |
|
|
|
3f0408e271
|
CIS role split and permission safety
|
2025-12-27 22:27:26 +01:00 |
|
