add basic.yml apt.yml and sshd.yaml

group_vars/all/main.yml

@@ -816,6 +816,319 @@ locales:
 set_default_limit_nofile: false
 
 
+# ---
+# vars used by roles/common/tasks/sshd.yml
+# ---
+
+sshd_ports:
+  - 22
+
+sshd_listen_address:
+   - '::'
+   - '0.0.0.0'
+
+sshd_host_keys:
+  - /etc/ssh/ssh_host_rsa_key
+  - /etc/ssh/ssh_host_ecdsa_key
+  - /etc/ssh/ssh_host_ed25519_key
+
+sshd_permit_root_login: !!str "no"
+
+sshd_authorized_keys_file: ".ssh/authorized_keys .ssh/authorized_keys2"
+
+sshd_pubkey_authentication: !!str "yes"
+
+sshd_password_authentication: !!str "no"
+
+sshd_use_pam: !!str "yes"
+
+sshd_print_motd: !!str "no"
+
+# sshd_kexalgorithms
+#
+# Example:
+#    sshd_kexalgorithms:
+#      - curve25519-sha256@libssh.org
+#      - diffie-hellman-group-exchange-sha256
+#      - diffie-hellman-group14-sha1
+#
+sshd_kexalgorithms: {}
+
+# sshd_kexalgorithms
+#
+# Example:
+#    sshd_ciphers:
+#      - chacha20-poly1305@openssh.com
+#      - aes256-gcm@openssh.com
+#      - aes256-ctr
+sshd_ciphers: {}
+
+sshd_use_dns: !!str "no"
+
+sshd_allowed_users: {}
+
+
+# ---
+# vars used by apt.yml
+# ---
+
+apt_manage_sources_list: true
+
+apt_src_enable: true
+apt_backports_enable: true
+
+apt_debian_mirror: http://ftp.de.debian.org/debian/
+apt_debian_contrib_nonfree_enable: true
+
+apt_update_cache_valid_time: 3600
+
+apt_upgrade: true
+apt_update: true
+
+apt_clean: true
+apt_autoremove: true
+
+apt_dpkg_configure: true
+apt_upgrade_type: dist
+apt_upgrade_dpkg_options:
+  - force-confdef
+  - force-confold
+apt_initial_install_stretch:
+  - apt-transport-https
+  - dbus
+  - openssh-server
+  - rssh
+  - vim
+  - vim-common
+  - vim-doc
+  - mc
+  - screen
+  - tmux
+  - bc
+  - figlet
+  - rcconf
+  - sudo
+  - rsync
+  - dselect
+  - iputils-ping
+  - apt-utils
+  - aptitude
+  - zip
+  - unzip
+  - bzip2
+  - arj
+  - locate
+  - curl
+  - gawk
+  - mawk
+  - lynx
+  - links
+  - w3m
+  - exuberant-ctags
+  - mime-support
+  - file
+  - coreutils
+  - moreutils
+  - less
+  - realpath
+  - sipcalc
+  - psmisc
+  - dnsutils
+  - rblcheck
+  - whois
+  - gettext
+  - gettext-base
+  - gettext-doc
+  - debian-keyring
+  - patch
+  - patchutils
+  - recode
+  - recode-doc
+  - librecode0
+  - librecode-dev
+  - sharutils
+  - perl
+  - perl-modules-5.24
+  - perl-doc
+  - libperl-dev
+  - libterm-readline-gnu-perl
+  - libterm-readline-perl-perl
+  - libterm-readkey-perl
+  - libmail-imapclient-perl
+  - libtime-duration-perl
+  - libtimedate-perl
+  - libwww-perl
+  - libpcre3
+  - libreadline5
+  - re2c
+  - util-linux
+  - parted
+  - lshw
+  - gdisk
+  - smartmontools
+  - tcpdump
+  - telnet
+  - unhide
+  - lsof
+  - hdparm
+  - groff
+  - iproute2
+  - bridge-utils
+  - vlan
+  - ethtool
+  - wipe
+  - iperf
+  - mtr
+  - iptraf
+  - wget
+  - logrotate
+  - rsyslog
+  - haveged
+  - rdate
+  - ntpdate
+  - wipe
+  - man-db
+  - groff
+  - iptables
+  - shellcheck
+  - ssl-cert
+  - ssl-cert-check
+  - git
+  - ftp
+  - htop
+  - net-tools
+  - lsb-release
+  - attr
+  - acl
+  - quota
+  - quotatool
+  - needrestart
+
+apt_initial_install_buster:
+  - apt-transport-https
+  - dbus
+  - openssh-server
+  - rush
+  - vim
+  - vim-common
+  - vim-doc
+  - mc
+  - screen
+  - tmux
+  - bc
+  - figlet
+  - rcconf
+  - sudo
+  - rsync
+  - dselect
+  - iputils-ping
+  - apt-utils
+  - aptitude
+  - zip
+  - unzip
+  - bzip2
+  - arj
+  - locate
+  - curl
+  - gawk
+  - mawk
+  - lynx
+  - links
+  - w3m
+  - ctags
+  - mime-support
+  - file
+  - coreutils
+  - moreutils
+  - less
+  - sipcalc
+  - psmisc
+  - dnsutils
+  - rblcheck
+  - whois
+  - gettext
+  - gettext-base
+  - gettext-doc
+  - debian-keyring
+  - patch
+  - patchutils
+  - recode
+  - recode-doc
+  - librecode0
+  - librecode-dev
+  - sharutils
+  - perl
+  - perl-modules-5.28
+  - perl-doc
+  - libperl-dev
+  - libterm-readline-gnu-perl
+  - libterm-readline-perl-perl
+  - libterm-readkey-perl
+  - libmail-imapclient-perl
+  - libtime-duration-perl
+  - libtimedate-perl
+  - libwww-perl
+  - libpcre3
+  - libio-compress-perl
+  - libreadline5
+  - re2c
+  - util-linux
+  - parted
+  - lshw
+  - gdisk
+  - smartmontools
+  - tcpdump
+  - telnet
+  - unhide
+  - lsof
+  - hdparm
+  - groff
+  - iproute2
+  - bridge-utils
+  - vlan
+  - ethtool
+  - wipe
+  - iperf
+  - mtr
+  - iptraf
+  - wget
+  - logrotate
+  - rsyslog
+  - haveged
+  - rdate
+  - ntpdate
+  - wipe
+  - man
+  - groff
+  - iptables
+  - shellcheck
+  - ssl-cert
+  - ssl-cert-check
+  - git
+  - ftp
+  - htop
+  - net-tools
+  - lsb-release
+  - attr
+  - acl
+  - quota
+  - quotatool
+  - needrestart
+
+apt_install: {}
+apt_install_state: latest
+
+apt_remove:
+  - apt-transport-tor
+  - tor
+  - tor-geoipdb
+  - torsocks
+
+apt_remove_purge: false
+
+microcode_package: intel-microcode
+
+
 # ---
 # vars used by roles/common/tasks/sudoers.yml
 # ---