Skip to content

Releases: loranmutafov/simple-bastion

v1.1.4 Make LogLevel configurable

08 Mar 18:33
Compare
Choose a tag to compare
Make LogLevel configurable

v1.1.3 Fix debug configuration

08 Mar 18:12
Compare
Choose a tag to compare
Fix debug logging and rename it to better reflect it is debug logging…

… and not simply verbosity

v1.1.2 Make verbosity configurable

08 Mar 17:59
Compare
Choose a tag to compare
Make verbosity configurable

v1.1.1 Expand configurability

08 Mar 12:41
Compare
Choose a tag to compare

Make the following sshd options configurable via env vars:

  • ClientAliveCountMax via CLIENT_ALIVE_COUNT_MAX
  • ClientAliveInterval via CLIENT_ALIVE_INTERVAL
  • TCPKeepAlive via TCP_KEEP_ALIVE

v1.1.0 Add user:ssh provisioning

27 Feb 01:31
cbc96d5
Compare
Choose a tag to compare

Enables provisioning of SSH keys per user a-la GCP, i.e. user:public_key

Example of the provisioning config:

cloudysanfrancisco:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAu5kKQCPF...
baklavainthebalkans:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDQDx3FNVC8...

v1.1.0-beta8 Replace last approach with simply disabling the user password in /etc/shadow

27 Feb 01:19
Compare
Choose a tag to compare

Using a star * instead of a bang !, keeps the user account unlocked, but still disables login by password by keeping the password invalid.

Effectively this leaves only the option of public key ssh login.

v1.1.0-beta7 Substitute usermod approach with UsePAM setting

27 Feb 01:02
Compare
Choose a tag to compare
Substitute usermod approach with UsePAM setting

v1.1.0-beta6 Disable password-based access for ssh users

27 Feb 00:51
Compare
Choose a tag to compare
Disable password-based access for ssh users

v1.1.0-beta5 Allow ssh-access to all bastion users

27 Feb 00:10
Compare
Choose a tag to compare
Give ssh access to all bastion-group users

v1.1.0-beta4 Call script by its absolute path

27 Feb 00:03
Compare
Choose a tag to compare
Call script by its absolute path