Sebastian Gumprich
bb588bd777
* linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>
24 lines
533 B
YAML
24 lines
533 B
YAML
---
|
|
sshd_path: /usr/sbin/sshd
|
|
ssh_host_keys_dir: /etc/ssh
|
|
sshd_service_name: sshd
|
|
ssh_owner: root
|
|
ssh_group: root
|
|
ssh_host_keys_owner: root
|
|
ssh_host_keys_group: ssh_keys
|
|
ssh_selinux_packages:
|
|
- python3-policycoreutils
|
|
- checkpolicy
|
|
|
|
# true if SSH support Kerberos
|
|
ssh_kerberos_support: true
|
|
|
|
# true if SSH has PAM support
|
|
ssh_pam_support: true
|
|
|
|
sshd_moduli_file: /etc/ssh/moduli
|
|
|
|
# disable CRYPTO_POLICY to take settings from sshd configuration
|
|
# see: https://access.redhat.com/solutions/4410591
|
|
sshd_disable_crypto_policy: true
|