ansible-sshd/vars/Amazon.yml

---
__sshd_config_mode: '0644'
sshd_packages:
  - openssh
  - openssh-server
sshd_sftp_server: /usr/libexec/openssh/sftp-server
__sshd_defaults:
  SyslogFacility: AUTHPRIV
  PermitRootLogin: forced-commands-only
  AuthorizedKeysFile: .ssh/authorized_keys
  PasswordAuthentication: no
  ChallengeResponseAuthentication: no
  UsePAM: yes
  X11Forwarding: yes
  PrintLastLog: yes
  UsePrivilegeSeparation: sandbox
  AcceptEnv:
    - LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
    - LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
    - LC_IDENTIFICATION LC_ALL LANGUAGE
    - XMODIFIERS
  Subsystem: "sftp {{ sshd_sftp_server }}"
__sshd_os_supported: yes
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`---`
Use proper variable precedence for configuratil file variables 2021-06-02 12:03:28 +02:00			`__sshd_config_mode: '0644'`
Remove set_facts tasks not to polute global namespace The usage of set_facts inside of roles is not recommended if it is used for internal variables used only inside of the role. It is recommended to use variables with smaller scope to avoid inter-dependencies between different invocations of the same role as demonstrated in the tests_alternative_file.yml later in the patch series ttps://github.com/oasis-roles/meta_standards#ansible-best-practices 2020-11-04 21:29:48 +01:00			`sshd_packages:`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`- openssh`
			`- openssh-server`
Remove set_facts tasks not to polute global namespace The usage of set_facts inside of roles is not recommended if it is used for internal variables used only inside of the role. It is recommended to use variables with smaller scope to avoid inter-dependencies between different invocations of the same role as demonstrated in the tests_alternative_file.yml later in the patch series ttps://github.com/oasis-roles/meta_standards#ansible-best-practices 2020-11-04 21:29:48 +01:00			`sshd_sftp_server: /usr/libexec/openssh/sftp-server`
Renames variables for all supported platforms 2018-09-03 00:23:58 +02:00			`__sshd_defaults:`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`SyslogFacility: AUTHPRIV`
			`PermitRootLogin: forced-commands-only`
			`AuthorizedKeysFile: .ssh/authorized_keys`
			`PasswordAuthentication: no`
			`ChallengeResponseAuthentication: no`
			`UsePAM: yes`
			`X11Forwarding: yes`
			`PrintLastLog: yes`
			`UsePrivilegeSeparation: sandbox`
			`AcceptEnv:`
			`- LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES`
			`- LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT`
			`- LC_IDENTIFICATION LC_ALL LANGUAGE`
			`- XMODIFIERS`
			`Subsystem: "sftp {{ sshd_sftp_server }}"`
Renames variables for all supported platforms 2018-09-03 00:23:58 +02:00			`__sshd_os_supported: yes`