Salt/openssh-formula
0
0
Fork 0
mirror of https://github.com/saltstack-formulas/openssh-formula.git synced 2024-11-27 23:07:53 +01:00
Code Issues Activity
9940513b6c
openssh-formula/pillar.example

107 lines
2.5 KiB
Plaintext
Raw Normal View History

Reverted the namespace change to avoid conflicts and backward incompatibilities
2014-02-09 23:42:52 +01:00
sshd_config:
Port: 22
Protocol: 2
HostKey:
- /etc/ssh/ssh_host_rsa_key
- /etc/ssh/ssh_host_dsa_key
- /etc/ssh/ssh_host_ecdsa_key
add ed25519 host key type; add AuthenticationMethods option
2015-01-16 18:21:10 +01:00
- /etc/ssh/ssh_host_ed25519_key
Explicitly defined options as strings. This fixes an issue where PyYAML was converting yes and no into True and False in the generated sshd_config file.
2014-04-27 20:52:58 +02:00
UsePrivilegeSeparation: 'yes'
Reverted the namespace change to avoid conflicts and backward incompatibilities
2014-02-09 23:42:52 +01:00
KeyRegenerationInterval: 3600
ServerKeyBits: 768
SyslogFacility: AUTH
LogLevel: INFO
LoginGraceTime: 120
Explicitly defined options as strings. This fixes an issue where PyYAML was converting yes and no into True and False in the generated sshd_config file.
2014-04-27 20:52:58 +02:00
PermitRootLogin: 'yes'
PasswordAuthentication: 'no'
StrictModes: 'yes'
RSAAuthentication: 'yes'
PubkeyAuthentication: 'yes'
IgnoreRhosts: 'yes'
RhostsRSAAuthentication: 'no'
HostbasedAuthentication: 'no'
PermitEmptyPasswords: 'no'
ChallengeResponseAuthentication: 'no'
add ed25519 host key type; add AuthenticationMethods option
2015-01-16 18:21:10 +01:00
AuthenticationMethods 'publickey,keyboard-interactive'
Explicitly defined options as strings. This fixes an issue where PyYAML was converting yes and no into True and False in the generated sshd_config file.
2014-04-27 20:52:58 +02:00
X11Forwarding: 'yes'
Reverted the namespace change to avoid conflicts and backward incompatibilities
2014-02-09 23:42:52 +01:00
X11DisplayOffset: 10
Explicitly defined options as strings. This fixes an issue where PyYAML was converting yes and no into True and False in the generated sshd_config file.
2014-04-27 20:52:58 +02:00
PrintMotd: 'no'
PrintLastLog: 'yes'
TCPKeepAlive: 'yes'
Reverted the namespace change to avoid conflicts and backward incompatibilities
2014-02-09 23:42:52 +01:00
AcceptEnv: "LANG LC_*"
Subsystem: "sftp /usr/lib/openssh/sftp-server"
Explicitly defined options as strings. This fixes an issue where PyYAML was converting yes and no into True and False in the generated sshd_config file.
2014-04-27 20:52:58 +02:00
UsePAM: 'yes'
Add a UseDNS option to pillar.example
2014-07-22 07:37:41 +02:00
UseDNS: 'yes'
Added AllowUsers,AllowGroups,DenyUsers,DenyGroups This will add more options to set to secure openssh - AllowUsers - AllowGroups - DenyUsers - DenyGroups
2015-01-16 22:56:59 +01:00
AllowUsers: 'vader@10.0.0.1 maul@evil.com sidious luke'
add DenyUsers and DenyGroups example
2015-01-17 20:04:03 +01:00
DenyUsers: 'yoda chewbaca@112.10.21.1'
AllowGroups: 'wheel staff imperial'
DenyGroups: 'rebel'
Deny
add pillar example
2014-09-19 18:42:17 +02:00
matches:
sftp_chroot:
type:
Group: sftpusers
options:
ChrootDirectory: /sftp-chroot/%u
X11Forwarding: no
AllowTcpForwarding: no
ForceCommand: internal-sftp
Added support to manage ssh certificates
2014-02-09 23:38:30 +01:00
Reverted the namespace change to avoid conflicts and backward incompatibilities
2014-02-09 23:42:52 +01:00
openssh:
Added support to manage ssh certificates
2014-02-09 23:38:30 +01:00
auth:
Update pillar.example with two valid ssh-keys
2015-01-28 23:00:47 +01:00
joe-valid-ssh-key-desktop:
- user: joe
Added support to manage ssh certificates
2014-02-09 23:38:30 +01:00
present: True
enc: ssh-rsa
Update pillar.example with two valid ssh-keys
2015-01-28 23:00:47 +01:00
comment: main key - desktop
joe-valid-ssh-key-notebook:
- user: joe
present: True
enc: ssh-rsa
comment: main key - notebook
joe-non-valid-ssh-key:
- user: joe
Added support to manage ssh certificates
2014-02-09 23:38:30 +01:00
present: False
enc: ssh-rsa
comment: obsolete key - removed
Cleanups for host key pillar example
2014-12-15 07:00:45 +01:00
generate_dsa_keys: False
provide_dsa_keys: False
Modifying OpenSSH formula state to populate public/private DSA and RSA keys based on pillar data
2014-01-03 05:34:48 +01:00
dsa:
private_key: |
-----BEGIN DSA PRIVATE KEY-----
NOT_DEFINED
-----END DSA PRIVATE KEY-----
public_key: |
ssh-dss NOT_DEFINED
Cleanups for host key pillar example
2014-12-15 07:00:45 +01:00
generate_ecdsa_keys: False
provide_ecdsa_keys: False
Update pillar.example
2014-08-24 13:18:37 +02:00
ecdsa:
private_key: |
-----BEGIN EC PRIVATE KEY-----
NOT_DEFINED
-----END EC PRIVATE KEY-----
public_key: |
ecdsa-sha2-nistp256 NOT_DEFINED
Cleanups for host key pillar example
2014-12-15 07:00:45 +01:00
Update pillar example
2014-08-24 17:44:33 +02:00
generate_rsa_keys: False
Cleanups for host key pillar example
2014-12-15 07:00:45 +01:00
provide_rsa_keys: False
Modifying OpenSSH formula state to populate public/private DSA and RSA keys based on pillar data
2014-01-03 05:34:48 +01:00
rsa:
private_key: |
-----BEGIN RSA PRIVATE KEY-----
NOT_DEFINED
-----END RSA PRIVATE KEY-----
public_key: |
ssh-rsa NOT_DEFINED
Add support for ED25519 host keys
2014-12-15 07:00:17 +01:00
generate_ed25519_keys: False
provide_ed25519_keys: False
ed25519:
private_key: |
-----BEGIN OPENSSH PRIVATE KEY-----
NOT_DEFINED
-----END OPENSSH PRIVATE KEY-----
public_key: |
ssh-ed25519 NOT_DEFINED
Reference in New Issue Copy Permalink