Ansible: Tweaks for Debian 12.

Ansible/roles/debian_server/tasks/main.yml

@@ -12,7 +12,7 @@
     - deb-src
   ansible.builtin.apt_repository:
     # yamllint disable-line rule:line-length
-    repo: '{{ item }} http://deb.debian.org/debian {{ ansible_facts.distribution_release }}-backports main contrib non-free'
+    repo: '{{ item }} http://deb.debian.org/debian {{ ansible_facts.distribution_release }}-backports main contrib non-free non-free-firmware'
     state: present
     update_cache: true
 

Ansible/tasks/sshd_config.yaml

 ---
 - name: Configure the SSH daemon
   with_dict:
-    CASignatureAlgorithms: >-
-      -ssh-rsa
-    HostbasedAcceptedKeyTypes: >-
-      -ssh-rsa
-    HostKeyAlgorithms: >-
-      -ssh-rsa
-    KexAlgorithms: >-
-      -diffie-hellman-group14-sha1
     MACs: >-
       -hmac-sha1,
       umac-64-etm@openssh.com,
@@ -16,9 +8,6 @@
       umac-64@openssh.com
     PermitRootLogin: !!str no
     PasswordAuthentication: !!str no
-    PubkeyAcceptedKeyTypes: >-
-      -ssh-rsa,
-      ssh-rsa-cert-v01@openssh.com
   ansible.builtin.lineinfile:
     backup: true
     line: '{{ item.key }} {{ item.value|replace(" ", "") }}'