sys_mailer_defaultdomain (default localdomain) and sshd_accept_env (default []) implemented.

defaults/main.yml

@@ -3,12 +3,14 @@ has_hwrng:              '{{ansible_virtualization_role != "guest" and ansible_lo
 is_virt_guest:          '{{ansible_virtualization_role == "guest"}}'
 is_container:           '{{ansible_virtualization_role == "guest" and ansible_virtualization_type == "lxc"}}'
 sys_default_users:      []
+sys_mailer_defaultdomain: 'localdomain'
 sshd_permit_root_login: 'prohibit-password'
 sshd_ciphers:           'chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr'
 sshd_macs:              'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com'
 sshd_kex_algorithms:    'sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256'
 sshd_kerberos_authentication: 'no'
 sshd_gssapi_authentication: 'no'
+sshd_accept_env: []
 sshd_host_keys:
 - '/etc/ssh/ssh_host_ed25519_key'
 sshd_pubkey_authentication:   'yes'

tasks/os-debian.yml

@@ -231,7 +231,7 @@
   when: "mailer.changed"
   copy:
     dest: /etc/nullmailer/defaultdomain
-    content: 'denkn.at'
+    content: '{{sys_mailer_defaultdomain}}'
     owner: root
     group: mail
     mode: 0640

templates/sshd-default.conf.j2

@@ -12,6 +12,9 @@ TCPKeepAlive           yes
 Ciphers                {{sshd_ciphers_}}
 MACs                   {{sshd_macs_}}
 KexAlgorithms          {{sshd_kex_algorithms_}}
+{%for k in sshd_accept_env%}
+AcceptEnv              {{k}}
+{%endfor%}
 {%for k in sshd_host_keys%}
 HostKey                {{k}}
 {%endfor%}