Add EL6 defaults

defaults/main.yml

@@ -12,6 +12,7 @@ sshd: {}
 sshd_packages: []
 sshd_config_owner: root
 sshd_config_group: root
+sshd_config_mode: "0600"
 sshd_config_file: /etc/ssh/sshd_config
 sshd_binary: /usr/sbin/sshd
 sshd_service: sshd

tasks/main.yml

@@ -3,6 +3,7 @@
   include_vars: "{{ item }}"
   with_first_found:
    - "{{ ansible_distribution }}.yml"
+   - "{{ ansible_os_family }}_{{ ansible_distribution_major_version }}.yml"
    - "{{ ansible_os_family }}.yml"
    - default.yml
 
@@ -23,7 +24,7 @@
     dest: "{{ sshd_config_file }}"
     owner: "{{ sshd_config_owner }}"
     group: "{{ sshd_config_group }}"
-    mode: 644
+    mode: "{{ sshd_config_mode }}"
   notify: check and reload sshd
 
 - name: Service enabled and running

vars/RedHat_6.yml

@@ -0,0 +1,19 @@
+---
+sshd_packages:
+  - openssh-server
+sshd_sftp_server: /usr/libexec/openssh/sftp-server
+sshd_defaults:
+  Protocol: 2
+  SyslogFacility: AUTHPRIV
+  PasswordAuthentication: yes
+  ChallengeResponseAuthentication: no
+  GSSAPIAuthentication: yes
+  GSSAPICleanupCredentials: yes
+  UsePAM: yes
+  AcceptEnv:
+    - LANG LC_TYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
+    - LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
+    - LC_IDENTIFICATION LC_ALL LANGUAGE
+    - XMODIFIERS
+  X11Forwarding: yes
+  Subsystem: sftp {{ sshd_sftp_server }}