Eric Cook
dfb04a43b4
set dig_pkg on arch linux for issue #59
8 yıl önce
llua
bd8d46d784
add OpenBSD to map.jinja
8 yıl önce
Wolodja Wentland
49923a6371
Drop overly opinionated ssh_config defaults
This set of options reflect the ssh_config options that are set by
default on Debian. The way this was set before has the potential to
break exisisting setups that rely on "normal" defaults, rather than the
rather opinionated ones that are now being shipped with this formula.
8 yıl önce
Simon Lloyd
daed52de19
Add sshd_config to map.jinja and check if dig command is available before installing 'dig' package.
8 yıl önce
Theo Chatzimichos
0abbaac60d
Fix the default Subystem sftp-server path for SLE
8 yıl önce
Nigel Sim
1e515b0f5d
make the host option rendering support lists by refactoring the main option rendering code
put the ssh_config Host:* options in the defaults file so they can be overridden
9 yıl önce
ketzacoatl
143451eb19
Add support for Host definitions in ssh_config
This gives us the ability to define system-wide definitions for specific Hosts, and their options.
For example, with this in pillar:
```
# this is the place for host-wide SSH config
ssh_config:
...
Hosts:
# this simplifies cloning with custom params
# eg: git clone my-git:foo/bar
my-git:
User: git
HostName: git.example.com
Port: 2222
```
This would add a section in `/etc/ssh/ssh_config`:
```
Host my-git
User git
HostName git.example.com
Port 2222
```
9 yıl önce
abednarik
b813b4b52a
Replaced iteritems deprecated function with items
9 yıl önce
abednarik
3791b11380
Added default path for sftp Subsystem in FreeBSD
9 yıl önce
Bogdan Radulescu
13cf374efe
Added configuration options for ssh_config
Made a small change to reflect the default sshd_config
9 yıl önce
Bogdan Radulescu
fd4381b769
The default value for ServerKeyBits is 1024 both upstream and in distros
9 yıl önce
René Jochum
064d489f41
Use iteritems() instead of items().
Signed-off-by: René Jochum <rene@jochums.at>
9 yıl önce
René Jochum
a013b79027
Use iteritems() instead of items().
Signed-off-by: René Jochum <rene@jochums.at>
9 yıl önce
elfixit
18ba94d0fc
add options to give a key size to generate_key
9 yıl önce
Ingo Bente
a927107b28
Adds support to customize /etc/ssh/moduli file
9 yıl önce
Ingo Bente
83bb5ac5a0
adds support to harden sshd_config (KeyExchange, Ciphers, MACs)
9 yıl önce
Thomas Juberg
6b68c44583
Stop messing up the first line in ssh_known_hosts
9 yıl önce
Imran Haider
4dddff0ccd
Fix service name for Arch Linux
9 yıl önce
Niels Abspoel
2a68ccac1a
Add option to remove ssh_host_keys
9 yıl önce
Niels Abspoel
ca62b7d118
Improve default lookup
Added defaults.yaml and map.jinja similar to template-formula and salt-formula
9 yıl önce
jvblasco
60691ef20d
Fix bug that added : at the end of the key
9 yıl önce
Raphaël Hertzog
1b74efd2d0
Add a new openssh.known_hosts state
This state manages /etc/ssh/ssh_known_hosts and fills it with
public SSH host keys of other minions.
9 yıl önce
Marc Schiffbauer
c6aeaf4dc5
add gentoo support
9 yıl önce
Marc Schiffbauer
28e0916840
sort distros alphabetically
9 yıl önce
Bernd Schlapsi
6efc981885
Refactor auth.sls to allow more keys for one user
10 yıl önce
Niels Abspoel
33ee945557
Added AllowUsers,AllowGroups,DenyUsers,DenyGroups
This will add more options to set to secure openssh
- AllowUsers
- AllowGroups
- DenyUsers
- DenyGroups
10 yıl önce
Bohdan Kmit
b843d8168b
add ed25519 host key type; add AuthenticationMethods option
10 yıl önce
Niels Abspoel
5871efb5bd
added archlinux support to openssh map.jinja
10 yıl önce
Franz Pletz
5d0f69ad2c
Cleanups for host key pillar example
10 yıl önce
Franz Pletz
33f21a0976
Add support for ED25519 host keys
10 yıl önce
Nitin Madhok
620cc0f199
Update map.jinja
10 yıl önce
Nitin Madhok
131a5cafcb
Update map.jinja
10 yıl önce
Nitin Madhok
9263857193
Update map.jinja
Correct indentation
10 yıl önce
Niels Abspoel
1efce43d55
Added Opensuse support to map.jinja
10 yıl önce
Skyler Berg
a83409182f
Fix jinja spacing mistake for unknown options
When specifying multiple unknown ssh options, they would all appear on
the same line.
10 yıl önce
Tim Jones
09ca7de060
Allow newline after ListenAddress
10 yıl önce
Robert Fairburn
8616d3d130
fix comment
10 yıl önce
Robert Fairburn
b24101264f
make sure to match options as the options dict!
10 yıl önce
Robert Fairburn
1a2de43ed7
defaults do not need a prefix
10 yıl önce
Robert Fairburn
85c97b450a
fix a typo in keywords being sent improperly
10 yıl önce
Robert Fairburn
abf6e09fbb
Fix a typo in the match jinja
10 yıl önce
Robert Fairburn
ba72c1e8b7
remove prefix when not needed
10 yıl önce
Robert Fairburn
c100fc88a3
allow for "Match" inside of an sshd_config
10 yıl önce
Alan Pearce
6fb57f40bc
Config: Add support for generating keys
10 yıl önce
Alan Pearce
73eaef4ea0
Config: Add support for ECDSA host keys
10 yıl önce
Alan Pearce
ce46343562
Config: Refactor host key provisioning into loop
10 yıl önce
Alan Pearce
2876a691b0
Remove reference to root group
By not specifying it, root user's group should be used.
10 yıl önce
Alan Pearce
edc208b79b
Add FreeBSD compatibility
10 yıl önce
Wes Turner
970777b9bb
Add a UseDNS option to sshd_config
10 yıl önce
Oleg Tsarev
48ebd1b07b
Changed sshd_config generation to more readable scheme.
Synced file with default from Ubuntu 12.04 latest
10 yıl önce