2018-08-26 17:25:12 +02:00
|
|
|
---
|
2019-03-27 14:23:41 +01:00
|
|
|
# default users for SSH access
|
|
|
|
|
sshd_default_allowed_users:
|
|
|
|
|
- "root"
|
|
|
|
|
- "ansible"
|
|
|
|
|
|
2019-03-27 15:16:55 +01:00
|
|
|
# don't forget to add the ssh_access group!
|
|
|
|
|
sshd_default_allowed_groups:
|
|
|
|
|
- "root"
|
|
|
|
|
- "admins"
|
|
|
|
|
|
|
|
|
|
|
2018-08-26 17:25:12 +02:00
|
|
|
# Enable AllowUsers and AllowGroups options
|
|
|
|
|
restrict_allow_users: True
|
2019-04-08 19:34:58 +02:00
|
|
|
|
2019-04-09 22:03:00 +02:00
|
|
|
# Require ed25519 key
|
|
|
|
|
only_allow_ed25519: true
|
|
|
|
|
|
2019-04-08 19:34:58 +02:00
|
|
|
# Allow login with password?
|
2019-04-08 19:37:59 +02:00
|
|
|
sshd_password_authentication: 'no' # 'yes' or 'no'
|
2019-04-09 22:03:00 +02:00
|
|
|
|
|
|
|
|
# Allow optional cryptho methods (NOT RECOMENDED)
|
|
|
|
|
generate_ecdsa_too: false
|
|
|
|
|
use_diffie-hellman-group-exchange-sha256: false
|
2019-04-09 22:13:59 +02:00
|
|
|
use_aes256-ctr: false
|
|
|
|
|
use_hmac-sha2-512: false
|
