Skip to content

Commit 759b746

Browse files
author
dev-sec CI
committed
update ssh_hardening readme
1 parent e6ea4f0 commit 759b746

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

roles/ssh_hardening/README.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,6 @@ For more information, see [this issue](https://github.com/dev-sec/ansible-collec
4646
<!-- BEGIN_ANSIBLE_DOCS -->
4747

4848
## Supported Operating Systems
49-
5049
- EL
5150
- 8, 9
5251
- Ubuntu
@@ -140,8 +139,8 @@ For more information, see [this issue](https://github.com/dev-sec/ansible-collec
140139
- Type: bool
141140
- Required: no
142141
- `ssh_ciphers`
143-
- Default: undefined
144-
- Description: Set a list of ciphers to override the one defined in `vars/main.yml`, or set it to false to skip this configuration.
142+
- Default: ``
143+
- Description: Change this list to overwrite ciphers. Defaults found in `defaults/main.yml`
145144
- Type: list
146145
- Required: no
147146
- `ssh_client_alive_count`
@@ -245,8 +244,8 @@ For more information, see [this issue](https://github.com/dev-sec/ansible-collec
245244
- Type: list
246245
- Required: no
247246
- `ssh_host_key_files`
248-
- Default: undefined
249-
- Description: Host keys for sshd. If undefined ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_ecdsa_key', '/etc/ssh/ssh_host_ed25519_key'] will be used, as far as supported by the installed sshd version, and a new `ssh_host_rsa_key` may be generated according to `ssh_host_rsa_key_size`. Set it to false to skip this configuration.
247+
- Default: ``
248+
- Description: Host keys for sshd. If empty ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_ecdsa_key', '/etc/ssh/ssh_host_ed25519_key'] will be used, as far as supported by the installed sshd version.
250249
- Type: list
251250
- Required: no
252251
- `ssh_host_rsa_key_size`
@@ -260,8 +259,8 @@ For more information, see [this issue](https://github.com/dev-sec/ansible-collec
260259
- Type: bool
261260
- Required: no
262261
- `ssh_kex`
263-
- Default: undefined
264-
- Description: Set a list of Key Exchange Algorithms to override the one defined in `vars/main.yml`, or set it to false to skip this configuration.
262+
- Default: ``
263+
- Description: Change this list to overwrite kexs. Defaults found in `defaults/main.yml`
265264
- Type: list
266265
- Required: no
267266
- `ssh_listen_to`
@@ -275,8 +274,8 @@ For more information, see [this issue](https://github.com/dev-sec/ansible-collec
275274
- Type: str
276275
- Required: no
277276
- `ssh_macs`
278-
- Default: undefined
279-
- Description: Set a list of macs to override the one defined in `vars/main.yml`, or set it to false to skip this configuration.
277+
- Default: ``
278+
- Description: Change this list to overwrite macs. Defaults found in `defaults/main.yml`
280279
- Type: list
281280
- Required: no
282281
- `ssh_max_auth_retries`

0 commit comments

Comments
 (0)