Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

Fix mine function example in README.rst

like it was already done in the pillar.example in this PR https://github.com/saltstack-formulas/openssh-formula/pull/36 to avoid confusions.

Allow moduli to be pulled as file

Give additional comments to inform that moduli can also be provided via a file, using the moduli_source key.

Added Jinja logic to allow the option to pull the moduli from an online source.

Convert dig exist check to unless req to remove spurious change in report

Correct openssh-clients package name for Red Hat

add more authentication options

Implement Session idle time out

set dig_pkg on arch linux for issue #59

add OpenBSD to map.jinja

Drop overly biased ssh_config defaults

This set of options reflect the ssh_config options that are set by
default on Debian. The way this was set before has the potential to
break exisisting setups that rely on "normal" defaults, rather than the
rather opinionated ones that are now being shipped with this formula.

Add sshd_config to map.jinja, and only install dig package if dig command not found.

Fix the default Subystem sftp-server path for SLE

Allow Host: * options to be overridden in the pillar

put the ssh_config Host:* options in the defaults file so they can be overridden

Add support for Host definitions in ssh_config

This gives us the ability to define system-wide definitions for specific Hosts, and their options.

For example, with this in pillar:

```
# this is the place for host-wide SSH config
ssh_config:
  ...
  Hosts:
    # this simplifies cloning with custom params
    # eg: git clone my-git:foo/bar
    my-git:
      User: git
      HostName: git.example.com
      Port: 2222
```

This would add a section in `/etc/ssh/ssh_config`:

```
Host my-git
    User git
    HostName git.example.com
    Port 2222
```

Replaced iteritems deprecated function with items

Added default path for sftp Subsystem in FreeBSD

Added configuration options for ssh_config

Made a small change to reflect the default sshd_config

The default value for ServerKeyBits is 1024 both upstream and in distros

Use iteritems() instead of items().

Signed-off-by: René Jochum <rene@jochums.at>

Signed-off-by: René Jochum <rene@jochums.at>

Signed-off-by: René Jochum <rene@jochums.at>

add options to give a key size to generate_key

Adds support to customize /etc/ssh/moduli file

adds support to harden sshd_config (KeyExchange, Ciphers, MACs)

Stop messing up the first line in ssh_known_hosts