Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

sshd: drop old rhel6 stuff

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-01-20 14:17:21 -08:00
parent 8140d863f0
commit 9495fde3f4
1 changed files with 2 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/basessh/templates/sshd_config
View file

@ -2,11 +2,7 @@ Protocol 2
Port {{ sshd_port }}
{% if ansible_distribution_major_version|int == 6 %}
KexAlgorithms diffie-hellman-group-exchange-sha256
MACs hmac-sha2-512,hmac-sha2-256
Ciphers aes256-ctr,aes192-ctr,aes128-ctr
{% elif ansible_distribution_major_version|int == 7 %}
{% if ansible_distribution_major_version|int == 7 %}
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
@ -57,9 +53,7 @@ AllowAgentForwarding no
X11Forwarding no
PermitTunnel no
{% if ansible_distribution_major_version|int == 6 %}
UsePrivilegeSeparation yes
{% elif ansible_distribution_major_version|int == 7 %}
{% if ansible_distribution_major_version|int == 7 %}
UsePrivilegeSeparation sandbox
{% endif %}