Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Fix item in sshd_config that Kevin found in review

Browse source
This commit is contained in:
Stephen Smoogen 2023-01-17 15:43:33 -05:00
parent 1618137592
commit 0863d2c8a9
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/basessh/templates/sshd_config
View file

@ -2,11 +2,11 @@ Protocol 2
Port {{ sshd_port }}
{% if ansible_distribution_major_version|int == 6 and ansible_distribution == 'RedHat' %}
{% if ansible_distribution_major_version|int == 6 %}
KexAlgorithms diffie-hellman-group-exchange-sha256
MACs hmac-sha2-512,hmac-sha2-256
Ciphers aes256-ctr,aes192-ctr,aes128-ctr
{% elif ansible_distribution_major_version|int == 7 and ansible_distribution == 'RedHat' %}
{% elif ansible_distribution_major_version|int == 7 %}
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
@ -52,9 +52,9 @@ AllowAgentForwarding no
X11Forwarding no
PermitTunnel no
{% if ansible_distribution_major_version == "6" and ansible_distribution == 'RedHat' %}
{% if ansible_distribution_major_version|int == 6 %}
UsePrivilegeSeparation yes
{% elif ansible_distribution_major_version == "7" and ansible_distribution == 'RedHat' %}
{% elif ansible_distribution_major_version|int == 7 %}
UsePrivilegeSeparation sandbox
{% endif %}