notthebee / ansible-easy-vpn

An Ansible playbook that sets up a Wireguard server with ad blocking, DNS-over-HTTPS, and a WebUI with 2FA
Other
1.09k stars 262 forks source link

root ssh login #287

Closed wp-coin closed 7 months ago

wp-coin commented 7 months ago

ought up

Describe the issue after setup I can still login with root ssh user, shouldn't this be disabled?

Environment:

notthebee commented 7 months ago

Have you rebooted your server after finishing the installation?

MacchiaGuardala commented 7 months ago

same, after rebooted

EDIT: I'v read another thing... sorry, my bad.

notthebee commented 7 months ago

I was not able to reproduce this on a Hetzner instance. The playbook includes a task that explicitly disables root login: https://github.com/notthebee/ansible-easy-vpn/blob/main/roles/ssh/tasks/main.yml#L61

So either the VPS provider is overriding the SSH configuration, or the playbook failed before configuring the SSH daemon.

wp-coin commented 7 months ago

you are correct, I had to restart the server