infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

basessh: We need these conditions to apply to CentOS as well as RedHat due to maintainer test instances.

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2019-10-19 16:44:03 +00:00 • committed by Pierre-Yves Chibon
parent 25f37dfee9
commit 50d998849b
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/basessh/templates/sshd_config
View file

@ -2,7 +2,7 @@ Protocol 2
Port {{ sshd_port }}
{% if ansible_distribution_major_version == "6" and ansible_distribution == 'RedHat' %}
{% if ansible_distribution_major_version == "6" %}
KexAlgorithms diffie-hellman-group-exchange-sha256
MACs hmac-sha2-512,hmac-sha2-256
Ciphers aes256-ctr,aes192-ctr,aes128-ctr
@ -31,9 +31,9 @@ AllowAgentForwarding no
X11Forwarding no
PermitTunnel no
{% if ansible_distribution_major_version == "6" and ansible_distribution == 'RedHat' %}
{% if ansible_distribution_major_version == "6" %}
UsePrivilegeSeparation yes
{% elif ansible_distribution_major_version == "7" and ansible_distribution == 'RedHat' %}
{% elif ansible_distribution_major_version == "7" %}
UsePrivilegeSeparation sandbox
{% endif %}