ansible/xoxys.sshd
0
0
Fork 0
Code Issues Pull Requests Releases Activity

fix: remove option to configure RekeyLimit

Browse Source
This commit is contained in:
Robert Kaussow 2022-09-19 15:41:59 +02:00
parent 94ab1f69e7
commit 9e0cbae01e
Signed by: xoxys
GPG Key ID: 4E692A2EAECC03C0
2 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
defaults/main.yml
View File

@ -43,9 +43,6 @@ sshd_max_sessions: 10
sshd_tcp_keep_alive: "yes"
sshd_use_dns: "no"
sshd_rekey_limit_size: "1G"
sshd_rekey_limit_time: "1h"
sshd_crypto_policy_enabled: True
# @var sshd_challenge_response_authentication:description: >

2
templates/etc/ssh/sshd_config.j2
View File

@ -29,7 +29,7 @@ HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
# Ciphers and keying
RekeyLimit {{ sshd_rekey_limit_size }} {{ sshd_rekey_limit_time }}
#RekeyLimit default none
{% if sshd_crypto_policy_enabled | bool %}
# This system is following system-wide crypto policy. The changes to