ansible-sshd/vars/Debian_11.yml

---
__sshd_service: ssh
__sshd_packages:
  - openssh-server
  - openssh-sftp-server
__sshd_config_mode: "0644"
__sshd_defaults:
  Include: /etc/ssh/sshd_config.d/*.conf
  ChallengeResponseAuthentication: false
  UsePAM: true
  X11Forwarding: true
  PrintMotd: false
  AcceptEnv: LANG LC_*
  Subsystem: "sftp {{ __sshd_sftp_server }}"
__sshd_os_supported: true
__sshd_runtime_directory: sshd

__sshd_environment_file: /etc/default/ssh
__sshd_environment_variable: $SSHD_OPTS
__sshd_service_after: auditd.service
__sshd_service_alias: sshd
ADD: bullseye support 2021-08-01 20:25:17 +02:00			`---`
Fixes un-overrideable public api variables 2022-08-17 13:53:56 +02:00			`__sshd_service: ssh`
			`__sshd_packages:`
ADD: bullseye support 2021-08-01 20:25:17 +02:00			`- openssh-server`
			`- openssh-sftp-server`
			`__sshd_config_mode: "0644"`
			`__sshd_defaults:`
fix: debian 11 defaults 2023-06-13 11:51:08 +02:00			`Include: /etc/ssh/sshd_config.d/*.conf`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`ChallengeResponseAuthentication: false`
fix: debian 11 defaults 2023-06-13 11:51:08 +02:00			`UsePAM: true`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`X11Forwarding: true`
			`PrintMotd: false`
ADD: bullseye support 2021-08-01 20:25:17 +02:00			`AcceptEnv: LANG LC_*`
Fixes un-overrideable public api variables 2022-08-17 13:53:56 +02:00			`Subsystem: "sftp {{ __sshd_sftp_server }}"`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`__sshd_os_supported: true`
fix: make runtime dir relative 2023-08-24 15:48:30 +02:00			`__sshd_runtime_directory: sshd`
Update service/socket files to match main OS's defaults Specifics: * Debian 12 has no longer the instantiated service using inet, see the following commit: https://salsa.debian.org/ssh-team/openssh/-/commit/0dc73888bbfc17fae04b891ac0c80f35f9c44f48 * I am not matching the Description tag verbosely as I do not find it crucial for functionality. * We generate additional -f switch to the sshd CLI pointing go the main sshd config we manage * The Before=sshd.service in the socket is not generated as I find it unnecessary when we conflict the service. * Recent Ubuntu versions have RuntimeDirectoryPreserve option, which I set for all Ubuntu/Debian as it should not hurt. Signed-off-by: Jakub Jelen <jjelen@redhat.com> 2023-10-30 17:51:44 +01:00
			`__sshd_environment_file: /etc/default/ssh`
			`__sshd_environment_variable: $SSHD_OPTS`
			`__sshd_service_after: auditd.service`
			`__sshd_service_alias: sshd`