Merge pull request #8 from WillsherSystems/feature/debian_defaults

Feature/debian defaults
This commit is contained in:
Matt Willsher 2015-01-04 13:38:33 +00:00
commit 4465a0b0ec
2 changed files with 39 additions and 3 deletions

View file

@ -36,6 +36,3 @@ sshd_defaults:
AcceptEnv: LANG LC_*
Subsystem: "sftp {{ sshd_sftp_server }}"
UsePAM: yes
Match:
- Condition: User vagrant
MaxSessions: 10

39
vars/Debian_8.yml Normal file
View file

@ -0,0 +1,39 @@
---
sshd_service: ssh
sshd_packages:
- openssh-server
- openssh-blacklist
- openssh-blacklist-extra
- openssh-sftp-server
sshd_config_mode: "0644"
sshd_defaults:
Port: 22
Protocol: 2
HostKey:
- /etc/ssh/ssh_host_rsa_key
- /etc/ssh/ssh_host_dsa_key
- /etc/ssh/ssh_host_ecdsa_key
- /etc/ssh/ssh_host_ed25519_key
UsePrivilegeSeparation: yes
KeyRegenerationInterval: 3600
ServerKeyBits: 1024
SyslogFacility: AUTH
LogLevel: INFO
LoginGraceTime: 120
PermitRootLogin: without-password
StrictModes: yes
RSAAuthentication: yes
PubkeyAuthentication: yes
IgnoreRhosts: yes
RhostsRSAAuthentication: no
HostbasedAuthentication: no
PermitEmptyPasswords: no
ChallengeResponseAuthentication: no
X11Forwarding: yes
X11DisplayOffset: 10
PrintMotd: no
PrintLastLog: yes
TCPKeepAlive: yes
AcceptEnv: LANG LC_*
Subsystem: "sftp {{ sshd_sftp_server }}"
UsePAM: yes