From 89e4a4c574b8df2e0b4b0ca984a67e48dbd771d7 Mon Sep 17 00:00:00 2001
From: Ivan Kurnosov <zerkms@zerkms.com>
Date: Tue, 5 Apr 2016 23:34:50 +1200
Subject: [PATCH] Added ubuntu 16.04 config

---
 vars/Ubuntu_16.yml | 40 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 vars/Ubuntu_16.yml

diff --git a/vars/Ubuntu_16.yml b/vars/Ubuntu_16.yml
new file mode 100644
index 0000000..9651105
--- /dev/null
+++ b/vars/Ubuntu_16.yml
@@ -0,0 +1,40 @@
+---
+sshd_service: ssh
+sshd_packages:
+  - openssh-server
+  - openssh-sftp-server
+sshd_config_mode: "0644"
+sshd_defaults:
+  Port: 22
+  Protocol: 2
+  HostKey:
+    - /etc/ssh/ssh_host_rsa_key
+    - /etc/ssh/ssh_host_dsa_key
+    - /etc/ssh/ssh_host_ecdsa_key
+    - /etc/ssh/ssh_host_ed25519_key
+  UsePrivilegeSeparation: yes
+  KeyRegenerationInterval: 3600
+  ServerKeyBits: 1024
+  SyslogFacility: AUTH
+  LogLevel: INFO
+  LoginGraceTime: 120
+  PermitRootLogin: prohibit-password
+  StrictModes: yes
+  RSAAuthentication: yes
+  PubkeyAuthentication: yes
+  AuthorizedKeysFile: "%h/.ssh/authorized_keys"
+  IgnoreRhosts: yes
+  RhostsRSAAuthentication: no
+  HostbasedAuthentication: no
+  PermitEmptyPasswords: no
+  ChallengeResponseAuthentication: no
+  X11Forwarding: yes
+  X11DisplayOffset: 10
+  PrintMotd: no
+  PrintLastLog: yes
+  TCPKeepAlive: yes
+  AcceptEnv: LANG LC_*
+  Subsystem: "sftp {{ sshd_sftp_server }}"
+  UsePAM: yes
+  UseDNS: no
+sshd_os_supported: yes