feat(ssh): add alpine support (#809)

Signed-off-by: Sebastian Gumprich <[email protected]>

roles/ssh_hardening/README.md

@@ -52,6 +52,7 @@ For more information, see [this issue](https://github.com/dev-sec/ansible-collec
   - focal, jammy, noble
 - Debian
   - bookworm, bullseye
+- Alpine
 - Amazon
 - Fedora
 - ArchLinux

roles/ssh_hardening/meta/main.yml

@@ -19,6 +19,7 @@ galaxy_info:
       versions:
         - bookworm
         - bullseye
+    - name: Alpine
     - name: Amazon
     - name: Fedora
     - name: ArchLinux

roles/ssh_hardening/vars/Alpine.yml

@@ -0,0 +1,23 @@
+---
+ssh_pkgs:
+  - openssh
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: /etc/ssh
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: root
+ssh_host_keys_owner: root
+ssh_host_keys_group: root
+ssh_host_keys_mode: "0600"
+
+# true if SSH support Kerberos
+ssh_kerberos_support: true
+
+# true if SSH has PAM support
+ssh_pam_support: true
+
+sshd_moduli_file: /etc/ssh/moduli
+
+# CRYPTO_POLICY is not supported on Archlinux
+# and the package check only works in Ansible >2.10
+sshd_disable_crypto_policy: false