merge ssh-hardening role into collection

roles/ssh_hardening/vars/Archlinux.yml

@@ -0,0 +1,10 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: root
+
+# CRYPTO_POLICY is not supported on Archlinux
+# and the package check only works in Ansible >2.10
+sshd_disable_crypto_policy: false

roles/ssh_hardening/vars/Debian.yml

@@ -0,0 +1,9 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: ssh
+ssh_owner: root
+ssh_group: root
+ssh_selinux_packages:
+  - policycoreutils-python
+  - checkpolicy

roles/ssh_hardening/vars/Fedora.yml

@@ -0,0 +1,9 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: root
+ssh_selinux_packages:
+  - python3-policycoreutils
+  - checkpolicy

roles/ssh_hardening/vars/FreeBSD.yml

@@ -0,0 +1,6 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: wheel

roles/ssh_hardening/vars/OpenBSD.yml

@@ -0,0 +1,11 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: wheel
+
+ssh_gssapi_support: false
+ssh_kerberos_support: false
+ssh_pam_support: false
+sshd_moduli_file: '/etc/moduli'

roles/ssh_hardening/vars/Oracle Linux.yml

@@ -0,0 +1,9 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: root
+ssh_selinux_packages:
+  - policycoreutils-python
+  - checkpolicy

roles/ssh_hardening/vars/RedHat.yml

@@ -0,0 +1,9 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: root
+ssh_selinux_packages:
+  - policycoreutils-python
+  - checkpolicy

roles/ssh_hardening/vars/RedHat_8.yml

@@ -0,0 +1,9 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: root
+ssh_selinux_packages:
+  - python3-policycoreutils
+  - checkpolicy

roles/ssh_hardening/vars/SmartOS.yml

@@ -0,0 +1,8 @@
+---
+sshd_path: /usr/lib/ssh/sshd
+ssh_host_keys_dir: '/var/ssh'
+sshd_service_name: ssh
+ssh_owner: root
+ssh_group: root
+
+ssh_pam_support: false

roles/ssh_hardening/vars/Suse.yml

@@ -0,0 +1,8 @@
+---
+sshd_path: /usr/sbin/sshd
+ssh_host_keys_dir: '/etc/ssh'
+sshd_service_name: sshd
+ssh_owner: root
+ssh_group: root
+
+sshd_disable_crypto_policy: false