Commit 51fdf83a authored by nimrod's avatar nimrod
Browse files

Ansible: Tweaks for Debian 12.

parent a3ea3389

Ansible/roles/debian_server/tasks/main.yml

+1 −1
Original line number Diff line number Diff line
@@ -12,7 +12,7 @@ 
    - deb-src

  ansible.builtin.apt_repository:

    # yamllint disable-line rule:line-length

    repo: '{{ item }} http://deb.debian.org/debian {{ ansible_facts.distribution_release }}-backports main contrib non-free'

    repo: '{{ item }} http://deb.debian.org/debian {{ ansible_facts.distribution_release }}-backports main contrib non-free non-free-firmware'

    state: present

    update_cache: true

Ansible/tasks/sshd_config.yaml

+0 −11
Original line number Diff line number Diff line 
---

- name: Configure the SSH daemon

  with_dict:

    CASignatureAlgorithms: >-

      -ssh-rsa

    HostbasedAcceptedKeyTypes: >-

      -ssh-rsa

    HostKeyAlgorithms: >-

      -ssh-rsa

    KexAlgorithms: >-

      -diffie-hellman-group14-sha1

    MACs: >-

      -hmac-sha1,

      umac-64-etm@openssh.com,
@@ -16,9 +8,6 @@ 
      umac-64@openssh.com

    PermitRootLogin: !!str no

    PasswordAuthentication: !!str no

    PubkeyAcceptedKeyTypes: >-

      -ssh-rsa,

      ssh-rsa-cert-v01@openssh.com

  ansible.builtin.lineinfile:

    backup: true

    line: '{{ item.key }} {{ item.value|replace(" ", "") }}'