Add secure defaults to pillar.example + secure sshd_config in defaults.yml #66

Add test-kitchen configuration

in order to prevent unnecessary changes due to
random ordering of dig results.

Allow list or string for some option, and setting of ConfigBanner

setup sftp correctly on RedHat-like machines

`pillar.example` now contains information on how to use the
'string-or-list' feature for some options.

Also an explanation on the new `ConfigBanner` option.

Now ssh_config also accepts string-or-list options, for serveral
keywords.

Added a macro to handle multivalue options entered in either string
format or list format (with auto joiner).

Add ability to control SSH server service status (default: on)

do not set UsePAM on OpenBSD

Upstream opensshd does not support PAM

openssh.auth will produce invalid SLS definition if sshd_config configs are missing

sshd won't start if AddressFamily option is specified

Put ssh keys on configured path in sshd_config (AuthorizedKeysFile)

fix Subsystem directive on archlinux

Update name of package containing dig on ArchLinux

Add AuthorizedKeysCommand support

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

Fix mine function example in README.rst

like it was already done in the pillar.example in this PR https://github.com/saltstack-formulas/openssh-formula/pull/36 to avoid confusions.

Allow user to specify aliased path (with %u)

Allow moduli to be pulled as file

Give additional comments to inform that moduli can also be provided via a file, using the moduli_source key.

Added Jinja logic to allow the option to pull the moduli from an online source.

Convert dig exist check to unless req to remove spurious change in report

Correct openssh-clients package name for Red Hat

add more authentication options

Implement Session idle time out