20 commits

Author	SHA1	Message	Date
Lars Kaiser	b4c259dd1d	feat(ssh): allow configuring MaxStartups	2024-02-29 15:22:53 +01:00
Lars Kaiser	f204f3036b	feat(ssh): allow configuring MaxSessions	2024-02-29 13:53:18 +01:00
Sammy	8bcc12dfd1	chore(ssh): disallow terrapin-vulnerable ciphers.. ... ..and MACs See https://terrapin-attack.com/	2023-12-19 14:22:25 +01:00
Sammy	74d09b4416	fix(ssh): fix typo that prevented allowed ciphers.. ... from being set in the sshd config	2023-12-19 12:15:37 +01:00
Jan Christian Grünhage	f4740fe77f	chore(ssh): update algorithm presets	2023-09-27 13:09:51 +02:00
Jan Christian Grünhage	b426afcced	chore(ssh): configure intersection of set and supported algorithms ... This is done in preparation of updating the algorithm presets. Adding new algorithms that aren't supported by older versions of openssh would break templating, and we don't want to limit ourselves to algorithms supported by all ssh versions we've got deployed anywhere.	2023-09-27 12:58:30 +02:00
Jan Christian Grünhage	7dc00eb18d	chore(ssh): switch default preset from bsi recommendations to our own	2023-09-27 12:57:19 +02:00
Jan Christian Grünhage	35bc21a0c0	feat(ssh): support runit for service reloading	2023-02-20 14:50:10 +01:00
Jan Christian Grünhage	d0d73b9327	feat(ssh): allow not restricting algorithms	2023-02-20 14:49:03 +01:00
Jan Christian Grünhage	e035b4e6ab	chore(ssh): make ansible-lint happy	2023-02-20 14:48:59 +01:00
Jadyn Emma Jaeger	11678a1329	feat: Make linter happy	2022-09-26 14:46:36 +02:00
Jadyn Emma Jäger	a7aecb27a1	feat(ssh): add config options for more flexibility	2022-08-03 09:22:13 +02:00
Lukas Lihotzki	ad8e17e45e	feat(ssh): configurable address family	2022-04-01 14:42:54 +02:00
Johanna Dorothea Reichmann	d1c5e83619	chore: update READMEs	2021-09-07 08:59:51 +02:00
transcaffeine	d7ab89a455	feat(ssh): support partial execution with prepare and deploy tags	2021-05-26 14:31:24 +02:00
transcaffeine	ff4a212d1e	feat(ssh): allow specifying LogLevel	2021-04-28 14:12:10 +02:00
transcaffeine	42744e0f25	docs: add READMEs to roles and add index of all roles	2021-03-31 10:04:34 +02:00
Jan Christian Grünhage	cf282336b2	chore: remove trailing whitespace	2021-01-22 21:10:10 +01:00
transcaffeine	bac766cb84	feat(ssh): configure presets (secure and bsi_recommended) for sshd	2020-11-19 11:58:18 +01:00
transcaffeine	8bd79bb458	feat(ssh): begin hardening	2020-11-16 09:27:50 +01:00