Ullrich Schäfer 8eb3481831 Harden SSH: disable passwords, forwarding, add keepalive ... Add SSH hardening to user_data for future server rebuilds: - PasswordAuthentication no (key-only access) - X11Forwarding no (headless server) - AllowTcpForwarding no (no SSH tunnels needed) - AllowAgentForwarding no (no agent forwarding needed) - MaxAuthTries 3 (reduced from 6) - ClientAliveInterval 300 + ClientAliveCountMax 2 (clean up dead sessions) Already applied manually to the existing server via /etc/ssh/sshd_config.d/99-hardening.conf. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-29 22:32:30 +02:00
..
.gitignore	Add infrastructure: Terraform, Docker Compose, BRouter, CD pipeline (#2)	2026-03-22 13:32:01 +01:00
main.tf	Harden SSH: disable passwords, forwarding, add keepalive	2026-03-29 22:32:30 +02:00
variables.tf	Add DNS records via Terraform, bump hcloud to v1.60 (#4)	2026-03-22 22:54:07 +01:00