Sina Tak Tehrani
ef31838fa2
* regenerate RSA key with size 4096 bits Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed lint problem Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed E301 lint error Signed-off-by: Sina Tak Tehrani <[email protected]> * added host keys related vars Signed-off-by: Sina Tak Tehrani <[email protected]> * used openssh_keypair module Signed-off-by: Sina Tak Tehrani <[email protected]> * changed RSA private key mode to 0640 Signed-off-by: Sina Tak Tehrani <[email protected]> * specified condition to prevent wrong file mode on debian-based OS Signed-off-by: Sina Tak Tehrani <[email protected]>
21 lines
454 B
YAML
21 lines
454 B
YAML
---
|
|
sshd_path: /usr/sbin/sshd
|
|
ssh_host_keys_dir: '/etc/ssh'
|
|
sshd_service_name: sshd
|
|
ssh_owner: root
|
|
ssh_group: root
|
|
ssh_host_keys_owner: 'root'
|
|
ssh_host_keys_group: 'root'
|
|
|
|
# true if SSH support Kerberos
|
|
ssh_kerberos_support: true
|
|
|
|
# true if SSH has PAM support
|
|
ssh_pam_support: true
|
|
|
|
sshd_moduli_file: '/etc/ssh/moduli'
|
|
|
|
# CRYPTO_POLICY is not supported on Archlinux
|
|
# and the package check only works in Ansible >2.10
|
|
sshd_disable_crypto_policy: false
|