deac/ansible-role-system
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

fix newline in sshd-default.conf j2-template. sshd_host_keys must be an array!

Browse source
This commit is contained in:
Denis Knauf 2024-03-24 23:23:35 +01:00
parent b079a81942
commit 3346bd0e08
2 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
defaults/main.yml
View file

@ -6,5 +6,6 @@ sshd_permit_root_login: 'prohibit-password'
sshd_ciphers: 'chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr' sshd_ciphers: 'chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr'
sshd_macs: 'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com' sshd_macs: 'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com'
sshd_kex_algorithms: 'sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256' sshd_kex_algorithms: 'sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256'
sshd_host_keys: /etc/ssh/ssh_host_ed25519_key sshd_host_keys:
- '/etc/ssh/ssh_host_ed25519_key'
sshd_pubkey_authentication: 'yes' sshd_pubkey_authentication: 'yes'

1
templates/sshd-default.conf.j2
View file

@ -1,3 +1,4 @@
#jinja2: trim_blocks:False
{%if sshd_port is defined %}Port {{sshd_port}}{%endif%} {%if sshd_port is defined %}Port {{sshd_port}}{%endif%}
PermitRootLogin {{sshd_permit_root_login}} PermitRootLogin {{sshd_permit_root_login}}
StrictModes yes StrictModes yes