Pandu E Poluan
e6603ae62a
Allow moduli to be pulled as file
Added Jinja logic to allow the option to pull the moduli from an online source.
8 vuotta sitten
Forrest
8ea31fd661
Merge pull request #68 from levlozhkin/master
Convert dig exist check to unless req to remove spurious change in report
8 vuotta sitten
Lev Lozhkin
781be61881
Convert dig exist check to unless req
8 vuotta sitten
Niels Abspoel
7eefd1a0f1
Merge pull request #67 from anderbubble/redhat-openssh-cl
Correct openssh-clients package name for Red Hat
8 vuotta sitten
Jonathon Anderson
87057c7c6b
Correct openssh-clients package name for Red Hat
8 vuotta sitten
Wolodja Wentland
118577283a
Merge pull request #65 from aboe76/more_authentication_options
add more authentication options
8 vuotta sitten
Niels Abspoel
641851632f
add more authentication options
8 vuotta sitten
Niels Abspoel
e6657df0d8
Merge pull request #64 from Atomics/master
Implement Session idle time out
8 vuotta sitten
Matthieu DERASSE
3542a1f534
Implement Session idle time out
8 vuotta sitten
Forrest
22037f7b8b
Merge pull request #63 from llua/arch_bind_utils
set dig_pkg on arch linux for issue #59
8 vuotta sitten
Forrest
6f9c7b7dba
Merge pull request #62 from llua/patch-1
add OpenBSD to map.jinja
8 vuotta sitten
Eric Cook
dfb04a43b4
set dig_pkg on arch linux for issue #59
8 vuotta sitten
llua
bd8d46d784
add OpenBSD to map.jinja
8 vuotta sitten
Forrest
f7c84783f0
Merge pull request #61 from babilen/relax-ssh-defaults
Drop overly biased ssh_config defaults
8 vuotta sitten
Wolodja Wentland
49923a6371
Drop overly opinionated ssh_config defaults
This set of options reflect the ssh_config options that are set by
default on Debian. The way this was set before has the potential to
break exisisting setups that rely on "normal" defaults, rather than the
rather opinionated ones that are now being shipped with this formula.
8 vuotta sitten
Forrest
d3ac3734f4
Merge pull request #58 from smlloyd/master
Add sshd_config to map.jinja, and only install dig package if dig command not found.
8 vuotta sitten
Simon Lloyd
daed52de19
Add sshd_config to map.jinja and check if dig command is available before installing 'dig' package.
8 vuotta sitten
Niels Abspoel
a85c19c256
Merge pull request #57 from tampakrap/fix_subsystem_sftp_path_for_sle
Fix the default Subystem sftp-server path for SLE
8 vuotta sitten
Theo Chatzimichos
0abbaac60d
Fix the default Subystem sftp-server path for SLE
8 vuotta sitten
Forrest
d5db2a6e89
Merge pull request #55 from nigelsim/default-host
Allow Host: * options to be overridden in the pillar
9 vuotta sitten
Nigel Sim
1e515b0f5d
make the host option rendering support lists by refactoring the main option rendering code
put the ssh_config Host:* options in the defaults file so they can be overridden
9 vuotta sitten
puneet kandhari
a2408d5e1e
Merge pull request #54 from ketzacoatl/patch-1
Add support for Host definitions in ssh_config
9 vuotta sitten
ketzacoatl
143451eb19
Add support for Host definitions in ssh_config
This gives us the ability to define system-wide definitions for specific Hosts, and their options.
For example, with this in pillar:
```
# this is the place for host-wide SSH config
ssh_config:
...
Hosts:
# this simplifies cloning with custom params
# eg: git clone my-git:foo/bar
my-git:
User: git
HostName: git.example.com
Port: 2222
```
This would add a section in `/etc/ssh/ssh_config`:
```
Host my-git
User git
HostName git.example.com
Port 2222
```
9 vuotta sitten
ek9
33344743b0
Add ability to control SSH server status (default: on)
9 vuotta sitten
Nitin Madhok
d14f8db721
Merge pull request #53 from abednarik/replace_deprecated_function_iteritems
Replaced iteritems deprecated function with items
9 vuotta sitten
abednarik
b813b4b52a
Replaced iteritems deprecated function with items
9 vuotta sitten
Forrest
c5aaffa9a9
Merge pull request #52 from abednarik/frebsd_stpf_subsystem_path
Added default path for sftp Subsystem in FreeBSD
9 vuotta sitten
abednarik
3791b11380
Added default path for sftp Subsystem in FreeBSD
9 vuotta sitten
POTIER Mathieu
f55445211c
Specify config clause only if defined in pillar.
Signed-off-by: POTIER Mathieu <mathieu.potier@onzeway.eu>
9 vuotta sitten
POTIER Mathieu
dda1fb5128
Put ssh keys on configured path in sshd_config (AuthorizedKeysFile)
Signed-off-by: POTIER Mathieu <mathieu.potier@onzeway.eu>
9 vuotta sitten
puneet kandhari
67e500fb11
Merge pull request #49 from cloud-hero/master
Added configuration options for ssh_config
9 vuotta sitten
Bogdan Radulescu
84296a8f90
Updated the readme to clarify that people need to explicitly turn off root login
9 vuotta sitten
Bogdan Radulescu
13cf374efe
Added configuration options for ssh_config
Made a small change to reflect the default sshd_config
9 vuotta sitten
puneet kandhari
331493194a
Merge pull request #47 from bogdanr/master
The default value for ServerKeyBits is 1024 both upstream and in distros
9 vuotta sitten
Bogdan Radulescu
fd4381b769
The default value for ServerKeyBits is 1024 both upstream and in distros
9 vuotta sitten
Forrest
1af5151bc9
Merge pull request #45 from pcdummy/master
Use iteritems() instead of items().
9 vuotta sitten
René Jochum
c27f9a81f3
Use iteritems() instead of items().
Signed-off-by: René Jochum <rene@jochums.at>
9 vuotta sitten
René Jochum
064d489f41
Use iteritems() instead of items().
Signed-off-by: René Jochum <rene@jochums.at>
9 vuotta sitten
René Jochum
a013b79027
Use iteritems() instead of items().
Signed-off-by: René Jochum <rene@jochums.at>
9 vuotta sitten
Nitin Madhok
1c5f6ee889
Merge pull request #44 from elfixit/master
add options to give a key size to generate_key
9 vuotta sitten
elfixit
18ba94d0fc
add options to give a key size to generate_key
9 vuotta sitten
Forrest
22309fdee6
Merge pull request #43 from ingben/feature/ssh_moduli
Adds support to customize /etc/ssh/moduli file
9 vuotta sitten
Ingo Bente
a927107b28
Adds support to customize /etc/ssh/moduli file
9 vuotta sitten
Forrest
9c5f3ea819
Merge pull request #41 from ingben/feature/harden_sshd_config
adds support to harden sshd_config (KeyExchange, Ciphers, MACs)
9 vuotta sitten
Ingo Bente
83bb5ac5a0
adds support to harden sshd_config (KeyExchange, Ciphers, MACs)
9 vuotta sitten
Forrest
bec4a2a77e
Merge pull request #40 from TJuberg/master
Stop messing up the first line in ssh_known_hosts
9 vuotta sitten
Thomas Juberg
6b68c44583
Stop messing up the first line in ssh_known_hosts
9 vuotta sitten
Forrest
92c2d24acb
Merge pull request #39 from imran1008/arch-fix
Fix service name for Arch Linux
9 vuotta sitten
Imran Haider
4dddff0ccd
Fix service name for Arch Linux
9 vuotta sitten
Forrest
f15a112e13
Merge pull request #38 from aboe76/remove_host_key_via_pillar
Add option to remove ssh_host_keys
9 vuotta sitten