Ansible/ssh-hardening
1
0
Fork 0
Code Issues 9 Pull requests 1 Projects Releases Wiki Activity

README updated

Browse source
This commit is contained in:
Sven Velt 2022-05-12 15:10:32 +02:00
parent 7b0fd3e6c6
commit 8c96e48deb
1 changed files with 14 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
README.md
View file

@ -1,17 +1,28 @@
ssh-hardening ssh-hardening
========= =========
SSH hardening, based on https://www.sshaudit.com & more SSH server hardening, based on https://www.sshaudit.com & more
Requirements Requirements
------------ ------------
- tbd - OpenSSH versions 6.5+
Role Variables Role Variables
-------------- --------------
- tbd Defaults:
- `ssh_hardening_hostkeys`: `rsa`, `ed25519`
- `ssh_hardening_hostkeys_all`: `dsa`, `ecdsa`, `rsa`, `ed25519`
- `ssh_hardening_moduli`: `/etc/ssh/moduli`
- `ssh_hardening_moduli_backup`: `/etc/ssh/moduli.not-hardened`
- `ssh_hardening_sshd_config`: `/etc/ssh/sshd_config`
Included via `vars/ssh_*`:
- `ssh_hardening_opts`: Parameter/Values to set for specific SSH version
Command line variables (undefined):
- `ssh_hardening_force`: version/id to include, overwrites detected version!
Dependencies Dependencies
------------ ------------