2014-12-22 10:41:44 +01:00
|
|
|
---
|
|
|
|
|
sshd_service: ssh
|
|
|
|
|
sshd_packages:
|
|
|
|
|
- openssh-server
|
|
|
|
|
- openssh-sftp-server
|
2015-01-04 15:56:06 +01:00
|
|
|
sshd_config_mode: "0644"
|
2014-12-22 10:41:44 +01:00
|
|
|
sshd_defaults:
|
|
|
|
|
Port: 22
|
|
|
|
|
Protocol: 2
|
2014-12-22 21:18:35 +01:00
|
|
|
HostKey:
|
2014-12-22 10:41:44 +01:00
|
|
|
- /etc/ssh/ssh_host_ed25519_key
|
2017-09-13 20:30:48 +02:00
|
|
|
- /etc/ssh/ssh_host_rsa_key
|
|
|
|
|
UsePrivilegeSeparation: sandbox
|
2014-12-22 10:41:44 +01:00
|
|
|
KeyRegenerationInterval: 3600
|
|
|
|
|
ServerKeyBits: 1024
|
|
|
|
|
SyslogFacility: AUTH
|
2017-09-13 20:30:48 +02:00
|
|
|
LogLevel: VERBOSE
|
2014-12-22 10:41:44 +01:00
|
|
|
LoginGraceTime: 120
|
|
|
|
|
PermitRootLogin: without-password
|
|
|
|
|
StrictModes: yes
|
|
|
|
|
RSAAuthentication: yes
|
|
|
|
|
PubkeyAuthentication: yes
|
|
|
|
|
IgnoreRhosts: yes
|
|
|
|
|
RhostsRSAAuthentication: no
|
2015-01-13 15:27:59 +01:00
|
|
|
HostbasedAuthentication: no
|
2014-12-22 10:41:44 +01:00
|
|
|
PermitEmptyPasswords: no
|
|
|
|
|
ChallengeResponseAuthentication: no
|
2017-09-13 20:30:48 +02:00
|
|
|
X11Forwarding: no
|
2014-12-22 10:41:44 +01:00
|
|
|
X11DisplayOffset: 10
|
2017-09-13 20:30:48 +02:00
|
|
|
PrintMotd: yes
|
2014-12-22 10:41:44 +01:00
|
|
|
PrintLastLog: yes
|
|
|
|
|
TCPKeepAlive: yes
|
|
|
|
|
AcceptEnv: LANG LC_*
|
2017-09-13 20:30:48 +02:00
|
|
|
Subsystem: "sftp {{ sshd_sftp_server }} -f AUTHPRIV -l INFO"
|
2014-12-22 10:41:44 +01:00
|
|
|
UsePAM: yes
|
2017-09-13 20:30:48 +02:00
|
|
|
KexAlgorithms: curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
|
|
|
|
|
Ciphers: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
|
|
|
|
|
MACs: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
|
|
|
|
|
AuthenticationMethods: publickey
|
2015-01-13 18:41:56 +01:00
|
|
|
sshd_os_supported: yes
|
