972 B
972 B
sshd
Deploy a hardened sshd server
Requirements
None
Role Variables
sshd_disable_pam: whether to disable PAM support. Default:falsesshd_password_auth: whether to allow password authentication. Default:falsesshd_challenge_response_auth: whether to allow challenge-response authentication. Default:falsesshd_gss_api_auth: whether to allow GSSAPI authentication. Default:falsesshd_allow_agent_forwarding: whether to allow SSH agent forwarding. Default:falsesshd_allow_tcp_forwarding: whether to allow TCP forwarding. Default:falsesshd_gateway_ports: whether to allow gateway ports. Default:falsesshd_permit_tunnel: whether to allow SSH tunneling. Default:false
Dependencies
None
Example Playbook
See: converge.yml
License
BSD