14 lines
897 B
YAML
14 lines
897 B
YAML
has_hwrng: '{{ansible_virtualization_role != "guest" and ansible_local.devices.hwrng }}'
|
|
is_virt_guest: '{{ansible_virtualization_role == "guest"}}'
|
|
is_container: '{{ansible_virtualization_role == "guest" and ansible_virtualization_type == "lxc"}}'
|
|
sys_default_users: []
|
|
sshd_permit_root_login: 'prohibit-password'
|
|
sshd_ciphers: 'chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr'
|
|
sshd_macs: 'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com'
|
|
sshd_kex_algorithms: 'sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256'
|
|
sshd_kerberos_authentication: 'no'
|
|
sshd_gssapi_authentication: 'no'
|
|
sshd_host_keys:
|
|
- '/etc/ssh/ssh_host_ed25519_key'
|
|
sshd_pubkey_authentication: 'yes'
|