Add Debian 8/Jessie defaults

This commit is contained in:
Matt Willsher 2015-01-04 13:36:33 +00:00
parent 0d10fb9a39
commit fd476f0c08

39
vars/Debian_8.yml Normal file
View file

@ -0,0 +1,39 @@
---
sshd_service: ssh
sshd_packages:
- openssh-server
- openssh-blacklist
- openssh-blacklist-extra
- openssh-sftp-server
sshd_config_mode: "0644"
sshd_defaults:
Port: 22
Protocol: 2
HostKey:
- /etc/ssh/ssh_host_rsa_key
- /etc/ssh/ssh_host_dsa_key
- /etc/ssh/ssh_host_ecdsa_key
- /etc/ssh/ssh_host_ed25519_key
UsePrivilegeSeparation: yes
KeyRegenerationInterval: 3600
ServerKeyBits: 1024
SyslogFacility: AUTH
LogLevel: INFO
LoginGraceTime: 120
PermitRootLogin: without-password
StrictModes: yes
RSAAuthentication: yes
PubkeyAuthentication: yes
IgnoreRhosts: yes
RhostsRSAAuthentication: no
HostbasedAuthentication: no
PermitEmptyPasswords: no
ChallengeResponseAuthentication: no
X11Forwarding: yes
X11DisplayOffset: 10
PrintMotd: no
PrintLastLog: yes
TCPKeepAlive: yes
AcceptEnv: LANG LC_*
Subsystem: "sftp {{ sshd_sftp_server }}"
UsePAM: yes