Commit 58c0f0ac authored by Lars Beckers's avatar Lars Beckers
Browse files

ssh-server: deploy ssh-config to enable SSHFP checking

parent bc03a4dc
Pipeline #1852 passed with stage
in 44 seconds
......@@ -38,6 +38,18 @@
tags:
- ssh
- name: ensure ssh is configured
template:
src: ssh_config.j2
dest: /etc/ssh/ssh_config
owner: root
group: root
mode: '0644'
backup: true
when: debian_version != "jessie"
tags:
- ssh
- name: ensure standard pam configuration for sshd
copy:
src: pam/sshd
......
......@@ -52,3 +52,4 @@ Host *
HashKnownHosts yes
GSSAPIAuthentication yes
GSSAPIDelegateCredentials no
VerifyHostKeyDNS yes
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment