Ensure root account is locked
Its locked by default but we might as well add the extra protection just
in case.
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 814e1e8..6333339 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -9,6 +9,11 @@
- https://github.com/nickva.keys
- https://github.com/wohali.keys
+- name: Lock root account
+ user:
+ name: root
+ password_lock: true
+
- name: Disable password authentication
lineinfile:
dest: /etc/ssh/sshd_config
