ansible-sshd/vars/Ubuntu_14.yml

---
__sshd_service: ssh
__sshd_packages:
  - openssh-server
  - openssh-sftp-server
__sshd_config_mode: "0644"
__sshd_defaults:
  Port: 22
  Protocol: 2
  HostKey:
    - /etc/ssh/ssh_host_rsa_key
    - /etc/ssh/ssh_host_dsa_key
    - /etc/ssh/ssh_host_ecdsa_key
    - /etc/ssh/ssh_host_ed25519_key
  UsePrivilegeSeparation: true
  KeyRegenerationInterval: 3600
  ServerKeyBits: 1024
  SyslogFacility: AUTH
  LogLevel: INFO
  LoginGraceTime: 120
  PermitRootLogin: without-password
  StrictModes: true
  RSAAuthentication: true
  PubkeyAuthentication: true
  IgnoreRhosts: true
  RhostsRSAAuthentication: false
  HostbasedAuthentication: false
  PermitEmptyPasswords: false
  ChallengeResponseAuthentication: false
  X11Forwarding: true
  X11DisplayOffset: 10
  PrintMotd: false
  PrintLastLog: true
  TCPKeepAlive: true
  AcceptEnv: LANG LC_*
  Subsystem: "sftp {{ __sshd_sftp_server }}"
  UsePAM: true
__sshd_os_supported: true
Ubuntu default values 2014-12-22 10:41:44 +01:00			`---`
Fixes un-overrideable public api variables 2022-08-17 13:53:56 +02:00			`__sshd_service: ssh`
			`__sshd_packages:`
Ubuntu default values 2014-12-22 10:41:44 +01:00			`- openssh-server`
			`- openssh-sftp-server`
Use proper variable precedence for configuratil file variables 2021-06-02 12:03:28 +02:00			`__sshd_config_mode: "0644"`
Renames variables for all supported platforms 2018-09-03 00:23:58 +02:00			`__sshd_defaults:`
Ubuntu default values 2014-12-22 10:41:44 +01:00			`Port: 22`
			`Protocol: 2`
More distro supported, better docs 2014-12-22 21:18:35 +01:00			`HostKey:`
Ubuntu default values 2014-12-22 10:41:44 +01:00			`- /etc/ssh/ssh_host_rsa_key`
			`- /etc/ssh/ssh_host_dsa_key`
			`- /etc/ssh/ssh_host_ecdsa_key`
			`- /etc/ssh/ssh_host_ed25519_key`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`UsePrivilegeSeparation: true`
Ubuntu default values 2014-12-22 10:41:44 +01:00			`KeyRegenerationInterval: 3600`
			`ServerKeyBits: 1024`
			`SyslogFacility: AUTH`
			`LogLevel: INFO`
			`LoginGraceTime: 120`
			`PermitRootLogin: without-password`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`StrictModes: true`
			`RSAAuthentication: true`
			`PubkeyAuthentication: true`
			`IgnoreRhosts: true`
			`RhostsRSAAuthentication: false`
			`HostbasedAuthentication: false`
			`PermitEmptyPasswords: false`
			`ChallengeResponseAuthentication: false`
			`X11Forwarding: true`
Ubuntu default values 2014-12-22 10:41:44 +01:00			`X11DisplayOffset: 10`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`PrintMotd: false`
			`PrintLastLog: true`
			`TCPKeepAlive: true`
Ubuntu default values 2014-12-22 10:41:44 +01:00			`AcceptEnv: LANG LC_*`
Fixes un-overrideable public api variables 2022-08-17 13:53:56 +02:00			`Subsystem: "sftp {{ __sshd_sftp_server }}"`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`UsePAM: true`
			`__sshd_os_supported: true`