diff --git a/Ansible/roles/debian_server/tasks/main.yml b/Ansible/roles/debian_server/tasks/main.yml index 5e9d31fe4df4d5195864e4dc8de4e8f42818bfde..a3a34e326797597949a2f627acfefe129359630b 100644 --- a/Ansible/roles/debian_server/tasks/main.yml +++ b/Ansible/roles/debian_server/tasks/main.yml @@ -12,7 +12,7 @@ - deb-src ansible.builtin.apt_repository: # yamllint disable-line rule:line-length - repo: '{{ item }} http://deb.debian.org/debian {{ ansible_facts.distribution_release }}-backports main contrib non-free' + repo: '{{ item }} http://deb.debian.org/debian {{ ansible_facts.distribution_release }}-backports main contrib non-free non-free-firmware' state: present update_cache: true diff --git a/Ansible/tasks/sshd_config.yaml b/Ansible/tasks/sshd_config.yaml index 79e71ae4f249778d0cf82cbd4ea4811ad7262ded..e54bf1bbee2983126fccdc84049bbc3c37238a69 100644 --- a/Ansible/tasks/sshd_config.yaml +++ b/Ansible/tasks/sshd_config.yaml @@ -1,14 +1,6 @@ --- - name: Configure the SSH daemon with_dict: - CASignatureAlgorithms: >- - -ssh-rsa - HostbasedAcceptedKeyTypes: >- - -ssh-rsa - HostKeyAlgorithms: >- - -ssh-rsa - KexAlgorithms: >- - -diffie-hellman-group14-sha1 MACs: >- -hmac-sha1, umac-64-etm@openssh.com, @@ -16,9 +8,6 @@ umac-64@openssh.com PermitRootLogin: !!str no PasswordAuthentication: !!str no - PubkeyAcceptedKeyTypes: >- - -ssh-rsa, - ssh-rsa-cert-v01@openssh.com ansible.builtin.lineinfile: backup: true line: '{{ item.key }} {{ item.value|replace(" ", "") }}'