From e14fbcfb996a3c93af4995d96afbd0e749e6043b Mon Sep 17 00:00:00 2001
From: Ian Hattendorf <ianhattendorf@gmail.com>
Date: Fri, 23 Jun 2017 11:26:16 -0700
Subject: [PATCH] Add Debian 9 (stretch) vars

Debian stretch has been released, copy Debian_8.yml into Debian_9.yml.
---
 vars/Debian_9.yml | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 vars/Debian_9.yml

diff --git a/vars/Debian_9.yml b/vars/Debian_9.yml
new file mode 100644
index 0000000..a64006d
--- /dev/null
+++ b/vars/Debian_9.yml
@@ -0,0 +1,38 @@
+---
+sshd_service: ssh
+sshd_packages:
+  - openssh-server
+  - openssh-sftp-server
+sshd_config_mode: "0644"
+sshd_defaults:
+  Port: 22
+  Protocol: 2
+  HostKey:
+    - /etc/ssh/ssh_host_rsa_key
+    - /etc/ssh/ssh_host_dsa_key
+    - /etc/ssh/ssh_host_ecdsa_key
+    - /etc/ssh/ssh_host_ed25519_key
+  UsePrivilegeSeparation: yes
+  KeyRegenerationInterval: 3600
+  ServerKeyBits: 1024
+  SyslogFacility: AUTH
+  LogLevel: INFO
+  LoginGraceTime: 120
+  PermitRootLogin: without-password
+  StrictModes: yes
+  RSAAuthentication: yes
+  PubkeyAuthentication: yes
+  IgnoreRhosts: yes
+  RhostsRSAAuthentication: no
+  HostbasedAuthentication: no
+  PermitEmptyPasswords: no
+  ChallengeResponseAuthentication: no
+  X11Forwarding: yes
+  X11DisplayOffset: 10
+  PrintMotd: no
+  PrintLastLog: yes
+  TCPKeepAlive: yes
+  AcceptEnv: LANG LC_*
+  Subsystem: "sftp {{ sshd_sftp_server }}"
+  UsePAM: yes
+sshd_os_supported: yes