library/roles/sshd_config/defaults/main.yml: More restrictive defaults for the ssh daemon.

library/roles/ubuntu-deb-general/meta/main.yml: Always run sshd_config.
This commit is contained in:
Andrea Dell'Amico 2016-08-02 16:04:44 +02:00
parent 12f1e0a30d
commit 80605e8530
2 changed files with 2 additions and 1 deletions

View File

@ -14,7 +14,7 @@ sshd_use_pam: "yes"
sshd_challenge_response_authentication: "no"
sshd_enable_sftp_subsystem: True
sshd_use_login: "no"
sshd_permit_tunnel: "yes"
sshd_permit_tunnel: "no"
sshd_gssapi_authentication: "no"
sshd_gssapi_credentials: "no"
sshd_x11_forwarding: "no"

View File

@ -4,4 +4,5 @@ dependencies:
- role: '../../library/roles/timezone'
- role: '../../library/roles/deb-set-hostname'
- role: '../../library/roles/deb-set-locale'
- role: '../../library/roles/sshd_config'
- role: '../../library/roles/fail2ban'