ansible-role-system/templates/sshd-default.conf.j2

18 lines
1.1 KiB
Django/Jinja

#jinja2: trim_blocks:False
{%if sshd_port is defined %}Port {{sshd_port}}{%endif%}
PermitRootLogin {{sshd_permit_root_login}}
StrictModes yes
{%if sshd_pubkey_authentication%}PubkeyAuthentication {{sshd_pubkey_authentication}}{%endif%}
{%if sshd_kerberos_authentication is defined%}KerberosAuthentication {{sshd_kerberos_authentication}}{%endif%}
{%if sshd_gssapi_authentication is defined%}GSSAPIAuthentication {{sshd_gssapi_authentication}}{%endif%}
{%if sshd_password_authentication is defined%}PasswordAuthentication {{sshd_password_authentication}}{%endif%}
{%if sshd_kbdinteractive_authentication is defined%}KBDInteractiveAuthentication {{sshd_kbdinteractive_authentication}}{%endif%}
{%if sshd_hostbased_authentication is defined%}HostbasedAuthentication {{sshd_hostbased_authentication}}{%endif%}
TCPKeepAlive yes
Ciphers {{sshd_ciphers_}}
MACs {{sshd_macs_}}
KexAlgorithms {{sshd_kex_algorithms_}}
{%for k in sshd_host_keys%}
HostKey {{k}}
{%endfor%}