ansible-sshd/vars/Debian.yml

---
sshd_service: ssh
sshd_packages:
  - openssh-server
sshd_config_mode: "0644"
__sshd_defaults:
  Port: 22
  Protocol: 2
  HostKey:
    - /etc/ssh/ssh_host_rsa_key
    - /etc/ssh/ssh_host_dsa_key
    - /etc/ssh/ssh_host_ecdsa_key
  UsePrivilegeSeparation: yes
  KeyRegenerationInterval: 3600
  ServerKeyBits: 768
  SyslogFacility: AUTH
  LogLevel: INFO
  LoginGraceTime: 120
  PermitRootLogin: yes
  StrictModes: yes
  RSAAuthentication: yes
  PubkeyAuthentication: yes
  IgnoreRhosts: yes
  RhostsRSAAuthentication: no
  HostbasedAuthentication: no
  PermitEmptyPasswords: no
  ChallengeResponseAuthentication: no
  X11Forwarding: yes
  X11DisplayOffset: 10
  PrintMotd: no
  PrintLastLog: yes
  TCPKeepAlive: yes
  AcceptEnv: LANG LC_*
  Subsystem: "sftp {{ sshd_sftp_server }}"
  UsePAM: yes
__sshd_os_supported: yes
Initial commit 2014-12-18 23:12:51 +01:00			`---`
Remove set_facts tasks not to polute global namespace The usage of set_facts inside of roles is not recommended if it is used for internal variables used only inside of the role. It is recommended to use variables with smaller scope to avoid inter-dependencies between different invocations of the same role as demonstrated in the tests_alternative_file.yml later in the patch series ttps://github.com/oasis-roles/meta_standards#ansible-best-practices 2020-11-04 21:29:48 +01:00			`sshd_service: ssh`
			`sshd_packages:`
Allow overrides, force sftp for Ansible 2014-12-21 21:29:13 +01:00			`- openssh-server`
Remove set_facts tasks not to polute global namespace The usage of set_facts inside of roles is not recommended if it is used for internal variables used only inside of the role. It is recommended to use variables with smaller scope to avoid inter-dependencies between different invocations of the same role as demonstrated in the tests_alternative_file.yml later in the patch series ttps://github.com/oasis-roles/meta_standards#ansible-best-practices 2020-11-04 21:29:48 +01:00			`sshd_config_mode: "0644"`
Adds ability to install a systemd service 2018-08-25 23:39:06 +02:00			`__sshd_defaults:`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`Port: 22`
			`Protocol: 2`
			`HostKey:`
			`- /etc/ssh/ssh_host_rsa_key`
			`- /etc/ssh/ssh_host_dsa_key`
			`- /etc/ssh/ssh_host_ecdsa_key`
Merge from develop changes 2015-01-04 13:51:40 +01:00			`UsePrivilegeSeparation: yes`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`KeyRegenerationInterval: 3600`
			`ServerKeyBits: 768`
			`SyslogFacility: AUTH`
			`LogLevel: INFO`
			`LoginGraceTime: 120`
			`PermitRootLogin: yes`
			`StrictModes: yes`
			`RSAAuthentication: yes`
			`PubkeyAuthentication: yes`
			`IgnoreRhosts: yes`
			`RhostsRSAAuthentication: no`
Fix HostbasedAuthentication typo 2015-07-23 19:24:12 +02:00			`HostbasedAuthentication: no`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`PermitEmptyPasswords: no`
Improve option rendering, allow per OS defaults 2014-12-21 23:23:02 +01:00			`ChallengeResponseAuthentication: no`
			`X11Forwarding: yes`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`X11DisplayOffset: 10`
Improve option rendering, allow per OS defaults 2014-12-21 23:23:02 +01:00			`PrintMotd: no`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`PrintLastLog: yes`
			`TCPKeepAlive: yes`
Improve option rendering, allow per OS defaults 2014-12-21 23:23:02 +01:00			`AcceptEnv: LANG LC_*`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`Subsystem: "sftp {{ sshd_sftp_server }}"`
Improve option rendering, allow per OS defaults 2014-12-21 23:23:02 +01:00			`UsePAM: yes`
Adds ability to install a systemd service 2018-08-25 23:39:06 +02:00			`__sshd_os_supported: yes`