dtoch56.ssh

Overview Versions Insights

ssh-role

CI Release Role Downloads

SSH Server and client configuration

Based on Mozilla InfoSec recommendations: https://infosec.mozilla.org/guidelines/openssh.html

Requirements

None.

Role Variables

Available variables are listed below, along with default values (see defaults/main.yml):

Variable Description Default
ssh_configure_server true
ssh_configure_client true
ssh_port Ssh-server listening port 22
ssh_ansible_user Account for Ansible ansible
ssh_users List of accounts to accept incoming SSH connections {}
ssh_allow_tcp_forwarding Allow tunneling out via SSH False
ssh_host_key_algorithms Ref
ssh_kex_algorithms Ref
ssh_ciphers Ref
ssh_macs Ref
sshd_host_key_algorithms Host keys the client should accepts Ref
sshd_kex_algorithms Specifies the available KEX (Key Exchange) algorithms Ref
sshd_ciphers Specifies the ciphers allowed Ref
sshd_macs Specifies the available MAC algorithms Ref
sshd_ca_signature_algorithms Allow this incoming sessions only Ref
sshd_hostbased_accepted_key_types Ref
sshd_pubkey_accepted_key_types Ref

HostKeyAlgorithms

Defaults:

KexAlgorithms

Defaults:

Ciphers

Defaults:

MACs

Defaults:

HostKeyAlgorithms

Defaults:

KexAlgorithms

Defaults:

Ciphers

Defaults:

MACs

Defaults:

CASignatureAlgorithms

Defaults:

  • ssh-ed25519

HostbasedAcceptedKeyTypes

Defaults:

  • ssh-ed25519

PubkeyAcceptedKeyTypes

Defaults:

  • ssh-ed25519

Dependencies

None.

Example Playbook

- hosts: servers
  roles:
    - { role: dtoch56.ssh }

License

MIT / BSD

Author Information

This role was created in 2021 by Max Mudrichenko.

Development

pip install pipenv
pipenv install
About

SSH server and client configuration

role ssh sshd
Install
ansible-galaxy install dtoch56.ssh
GitHub repository
0 stars
0 forks
0 open issues
License
mit
Downloads
103
Owner
Max
Web developer, DevOps