ansible
/
xoxys.sshd
0
0
Fork 0
Code Issues Pull Requests Releases Activity

feat: add option for LoginGraceTime and MaxStartups
continuous-integration/drone/push Build is passing Details

This commit is contained in:
Robert Kaussow 2022-09-19 15:49:40 +02:00
parent 9e0cbae01e
commit ce434c29d7
Signed by: xoxys
GPG Key ID: 4E692A2EAECC03C0
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -42,6 +42,8 @@ sshd_max_auth_tries: 6
sshd_max_sessions: 10
sshd_tcp_keep_alive: "yes"
sshd_use_dns: "no"
sshd_login_grace_time: 60
sshd_max_startups: "10:30:60"
sshd_crypto_policy_enabled: True

4
templates/etc/ssh/sshd_config.j2
View File

@ -50,7 +50,7 @@ LogLevel {{ sshd_log_level }}
# Authentication:
#LoginGraceTime 2m
LoginGraceTime {{ sshd_login_grace_time }}
PermitRootLogin {{ sshd_permit_root_login }}
StrictModes {{ sshd_strict_modes }}
{% if sshd_allow_groups %}
@ -136,7 +136,7 @@ ClientAliveInterval {{ sshd_client_alive_interval }}
ClientAliveCountMax {{ sshd_client_alive_count_max }}
UseDNS {{ sshd_use_dns }}
#PidFile /var/run/sshd.pid
#MaxStartups 10:30:100
MaxStartups {{ sshd_max_startups }}
#PermitTunnel no
#ChrootDirectory none
#VersionAddendum none