mirror of
https://github.com/willshersystems/ansible-sshd
synced 2024-11-05 11:23:29 +01:00
vars: Ubuntu: Add default variables for Ubuntu
This commit is contained in:
parent
a340add520
commit
04c912cc67
1 changed files with 40 additions and 0 deletions
40
vars/Ubuntu.yml
Normal file
40
vars/Ubuntu.yml
Normal file
|
@ -0,0 +1,40 @@
|
||||||
|
---
|
||||||
|
sshd_service: ssh
|
||||||
|
sshd_packages:
|
||||||
|
- openssh-server
|
||||||
|
- openssh-sftp-server
|
||||||
|
sshd_config_mode: "0644"
|
||||||
|
sshd_defaults:
|
||||||
|
Port: 22
|
||||||
|
Protocol: 2
|
||||||
|
HostKey:
|
||||||
|
- /etc/ssh/ssh_host_rsa_key
|
||||||
|
- /etc/ssh/ssh_host_dsa_key
|
||||||
|
- /etc/ssh/ssh_host_ecdsa_key
|
||||||
|
- /etc/ssh/ssh_host_ed25519_key
|
||||||
|
UsePrivilegeSeparation: yes
|
||||||
|
KeyRegenerationInterval: 3600
|
||||||
|
ServerKeyBits: 1024
|
||||||
|
SyslogFacility: AUTH
|
||||||
|
LogLevel: INFO
|
||||||
|
LoginGraceTime: 120
|
||||||
|
PermitRootLogin: prohibit-password
|
||||||
|
StrictModes: yes
|
||||||
|
RSAAuthentication: yes
|
||||||
|
PubkeyAuthentication: yes
|
||||||
|
AuthorizedKeysFile: "%h/.ssh/authorized_keys"
|
||||||
|
IgnoreRhosts: yes
|
||||||
|
RhostsRSAAuthentication: no
|
||||||
|
HostbasedAuthentication: no
|
||||||
|
PermitEmptyPasswords: no
|
||||||
|
ChallengeResponseAuthentication: no
|
||||||
|
X11Forwarding: yes
|
||||||
|
X11DisplayOffset: 10
|
||||||
|
PrintMotd: no
|
||||||
|
PrintLastLog: yes
|
||||||
|
TCPKeepAlive: yes
|
||||||
|
AcceptEnv: LANG LC_*
|
||||||
|
Subsystem: "sftp {{ sshd_sftp_server }}"
|
||||||
|
UsePAM: yes
|
||||||
|
UseDNS: no
|
||||||
|
sshd_os_supported: yes
|
Loading…
Reference in a new issue