2018-08-26 17:25:12 +02:00
|
|
|
---
|
2019-04-14 15:01:00 +02:00
|
|
|
# set the ssh port
|
|
|
|
|
ssh_port: 22
|
|
|
|
|
|
2019-03-27 14:23:41 +01:00
|
|
|
# default users for SSH access
|
|
|
|
|
sshd_default_allowed_users:
|
|
|
|
|
- "root"
|
|
|
|
|
- "ansible"
|
|
|
|
|
|
2019-03-27 15:16:55 +01:00
|
|
|
# don't forget to add the ssh_access group!
|
|
|
|
|
sshd_default_allowed_groups:
|
|
|
|
|
- "root"
|
|
|
|
|
- "admins"
|
|
|
|
|
|
2018-08-26 17:25:12 +02:00
|
|
|
# Enable AllowUsers and AllowGroups options
|
|
|
|
|
restrict_allow_users: True
|
2019-04-08 19:34:58 +02:00
|
|
|
|
2019-05-15 11:41:00 +02:00
|
|
|
# Forcing only ed25519 SSH keys
|
2019-04-09 22:03:00 +02:00
|
|
|
only_allow_ed25519: true
|
|
|
|
|
|
2019-04-08 19:34:58 +02:00
|
|
|
# Allow login with password?
|
2019-04-08 19:37:59 +02:00
|
|
|
sshd_password_authentication: 'no' # 'yes' or 'no'
|
2019-04-09 22:03:00 +02:00
|
|
|
|
|
|
|
|
# Allow optional cryptho methods (NOT RECOMENDED)
|
|
|
|
|
generate_ecdsa_too: false
|
2019-04-09 22:19:42 +02:00
|
|
|
use_diffie_hellman_group_exchange_sha256: false
|
|
|
|
|
use_aes256_ctr: false
|
|
|
|
|
use_hmac_sha2_512: false
|
2019-05-15 11:41:00 +02:00
|
|
|
|
2019-11-14 11:23:05 +01:00
|
|
|
do_not_delete_legacy_ssh_keys: true
|
2019-11-14 11:12:47 +01:00
|
|
|
|
2019-05-29 11:01:25 +02:00
|
|
|
# version check for this role?
|
2019-05-15 11:41:00 +02:00
|
|
|
submodules_versioncheck: true
|
