This commit is contained in:
Christoph 2024-12-04 17:57:55 +01:00
parent 4a2b244eeb
commit 19617c6a5c
7 changed files with 2558 additions and 2039 deletions

View File

@ -16,5 +16,6 @@
# ansible-playbook first_run.yml -i hosts -u root --ask-pass
- hosts: all
strategy: free
roles:
- common

View File

@ -2012,6 +2012,7 @@ default_user:
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMvy+IDUeoVwLg+cJNcKzls5guOrVUretsf05v3Y2N+Y root@default-oopen-server'
- name: borg
user_id: 1065
@ -2108,92 +2109,7 @@ sshd_use_dns: !!str "no"
sshd_gateway_ports: !!str "no"
sshd_required_rsa_size: 4096
# sshd_pubkey_accepted_algorithms:
#
# if the specified list begins with a '+' character, then the specified
# algorithms will be appended to the default set instead of replacing them.
#
# If the specified list begins with a '-' character, then the specified algorithms
# (including wildcards) will be removed from the default set instead of replacing them.
#
# If the specified list begins with a '^' character, then the
# specified algorithms will be placed at the head of the default set.
#sshd_pubkey_accepted_algorithms:
# - curve25519-sha256@libssh.org
# - diffie-hellman-group1-sha1
# - diffie-hellman-group14-sha1
# - diffie-hellman-group14-sha256
# - diffie-hellman-group16-sha512
# - diffie-hellman-group18-sha512
# - diffie-hellman-group-exchange-sha1
# - diffie-hellman-group-exchange-sha256
# - ecdh-sha2-nistp256
# - ecdh-sha2-nistp384
# - ecdh-sha2-nistp521
#sshd_pubkey_accepted_algorithms:
# - +ssh-rsa
# - ssh-dss
# sshd_kexalgorithms
#
# Example:
# sshd_kexalgorithms:
# - ntrup761x25519-sha512@openssh.com
# - curve25519-sha256,curve25519-sha256@libssh.org
# - ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
# - diffie-hellman-group-exchange-sha256
# - diffie-hellman-group16-sha512,diffie-hellman-group18-sha512
# - diffie-hellman-group14-sha256
#
#sshd_kexalgorithms: {}
# sshd__ciphers
#
# Example:
# sshd_ciphers:
# - chacha20-poly1305@openssh.com
# - aes128-ctr
# - aes192-ctr
# - aes256-ctr
# - aes128-gcm@openssh.com
# - aes256-gcm@openssh.com
#sshd_ciphers: {}
# sshd_macs
#
# Example:
# sshd_macs:
# - umac-64-etm@openssh.com,umac-128-etm@openssh.com
# - hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
# - hmac-sha1-etm@openssh.com
# - umac-64@openssh.com,umac-128@openssh.com
# - hmac-sha2-256,hmac-sha2-512,hmac-sha1
#sshd_macs: {}
# sshd_hostkeyalgorithms
#
# Example:
# - ssh-ed25519-cert-v01@openssh.com
# - ecdsa-sha2-nistp256-cert-v01@openssh.com
# - ecdsa-sha2-nistp384-cert-v01@openssh.com
# - ecdsa-sha2-nistp521-cert-v01@openssh.com
# - sk-ssh-ed25519-cert-v01@openssh.com
# - sk-ecdsa-sha2-nistp256-cert-v01@openssh.com
# - rsa-sha2-512-cert-v01@openssh.com
# - rsa-sha2-256-cert-v01@openssh.com
# - ssh-ed25519
# - ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
# - sk-ssh-ed25519@openssh.com
# - sk-ecdsa-sha2-nistp256@openssh.com
# - rsa-sha2-512
# - rsa-sha2-256
#
#sshd_hostkeyalgorithms: {}
#sshd_required_rsa_size: 4096
# This users are allowed to use password authentification
#
@ -2250,8 +2166,12 @@ sudoers_file_user_back_privileges:
- 'ALL=(root) NOPASSWD: /usr/bin/rsync'
- 'ALL=(root) NOPASSWD: /usr/bin/find'
- 'ALL=(root) NOPASSWD: /usr/bin/realpath'
- 'ALL=(root) NOPASSWD: /root/bin/borg-backup/borg-umount-archiv.sh'
- 'ALL=(root) NOPASSWD: /root/bin/borg-backup/borg-backup.sh'
- 'ALL=(root) NOPASSWD: /root/bin/borg-backup/borg-backup-nc.sh'
- 'ALL=(root) NOPASSWD: /root/bin/borg2-backup/borg2-umount-archiv.sh'
- 'ALL=(root) NOPASSWD: /root/bin/borg2-backup/borg2-backup.sh'
- 'ALL=(root) NOPASSWD: /root/bin/borg2-backup/borg2-backup-nc.sh'
sudoers_file_user_back_postgres_privileges:

View File

@ -67,7 +67,7 @@ default_user:
password: $6$7oimWvvy$EHjynqU3KxaHie.9njz9rmVyh/dYpZOREl9gLo7fLrQXCAM9LqvrRvijCiAhfgnA6pz5VQe5oubkJQB0HF2pf/
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5GDIFA6/i6lzkr+EP/EZM9glrK0eSR0nmrEFgUJ4n8 wadmin@ga-st-lsx1'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5GDIFA6/i6lzkr+EP/EZM9glrK0eSR0nmrEFgUJ4n8 wadmin@ga-st-lsx1'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID17MN6fUg0D1dMSgVYIBpIy+sDBBmiaHmXRXU63TXJA wadmin@ga-st-li1303'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKtK8/rxHL1MKX5AHrgAzUYu0kV+1iYCmknpTQ7F0ham wadmin@wolf-debtest'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcaDFxj0pYjOv/ohFVxVY2RKvy6ACZFPX9UkrUPHkbN wadmin@wolf-x1'

View File

@ -96,6 +96,80 @@ resolved_fallback_nameserver:
- 194.150.168.168
# ---
# vars used by roles/common/tasks/cron.yml
# ---
cron_env_entries:
- name: PATH
job: /root/bin/admin-stuff:/root/bin:/usr/local/apache2/bin:/usr/local/php/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
- name: SHELL
job: /bin/bash
insertafter: PATH
cron_user_special_time_entries:
- name: "Restart DNS Cache service 'systemd-resolved'"
special_time: reboot
job: "sleep 5 ; /bin/systemctl restart systemd-resolved"
insertafter: PATH
- name: "Check if postfix mailservice is running. Restart service if needed."
special_time: reboot
job: "sleep 10 ; /root/bin/monitoring/check_postfix.sh > /dev/null 2>&1"
insertafter: PATH
cron_user_entries:
- name: "Check if SSH service is running. Restart service if needed."
minute: '*/5'
hour: '*'
job: /root/bin/monitoring/check_ssh.sh
- name: "Check if Postfix Mailservice is up and running?"
minute: '*/15'
hour: '*'
job: /root/bin/monitoring/check_postfix.sh
- name: "/root/bin/postfix/check-postfix-fatal-errors.sh"
minute: '*/17'
hour: '*'
job: /root/bin/postfix/check-postfix-fatal-errors.sh
- name: "Generate/Renew Let's Encrypt Certificates if needed (using dehydrated script)"
minute: '23'
hour: '05'
job: /var/lib/dehydrated/cron/dehydrated_cron.sh
- name: "Check whether all certificates are included in the VHOST configurations"
minute: '33'
hour: '05'
job: /var/lib/dehydrated/tools/update_ssl_directives.sh
- name: "Check if remote website is online"
minute: '*/15'
hour: '7-23'
job: /root/bin/monitoring/check_remote_websites.sh
- name: "Remote Borg2 Backup"
minute: '04'
hour: '00'
job: /root/crontab/backup-rborg2/rborg2.sh
- name: "Remote Borg Backup"
minute: '34'
hour: '01'
job: /root/crontab/backup-rborg/rborg.sh
- name: "Check hard disc usage."
minute: '43'
hour: '6'
job: /root/bin/admin-stuff/check-disc-usage.sh -c 85
# ---
# vars used by roles/common/tasks/users.yml
# ---
@ -139,6 +213,7 @@ default_user:
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMvy+IDUeoVwLg+cJNcKzls5guOrVUretsf05v3Y2N+Y root@default-oopen-server'
- name: borg
user_id: 1065
@ -149,6 +224,85 @@ default_user:
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmfp+4waTzHxdT5TaxAMsIPDDwNe8Dwuif1jL+9v9GP root@a.mx'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFBIyXel+KOTLB6VB2xJwyWaZc0KuCJzocwlziFdovCl root@a.ns'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGi22vcCilahX9KwbqcF8/D0RnzQXvgzTUFTmRHNJsBZ root@anabaena'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINU1InXFKZX9emaT5QsY4Nr0tr8CzbyV8Js8RzZC9vGk root@b.mx'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPo7hI8oIS+/xufCUNTTgNoz592udJaU+79L0uADzKJY root@b.ns'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMtIXFS9OrKBvBl+fKtYN/lOOKpPuuc02H8HV+++LeBU root@backup'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKT+QOy+R6O4ojAeB7y/CRMmfbB19rFstvEW7saHpHMX root@c.mx'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICPrJu40Up1x9VCTTac6+ANjJ2NFXfDb5v3dP4pVgm+c root@cl-01'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7JBJ0qQJsTlADj/zMoxGlzPCGlnh0ngDS5+tkyVqgf root@cl-02'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN3VloFw13vVt8UAV5h0860Wq/vFJEm5EazOqM+cVe17 root@cl-flr'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGRaUsGqBvZBDzyh1kuldC/jdbtuoXFgBZ7PbgSqytSn root@cl-fm'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvmOpsiL+eiJ3qZVDJiUCFVZge0OQJ1hpZgw7pJ8sq5 root@cl-irights'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL7h6rR+q5bRh/qgzA7ZyiZcRr9vMbo7cxhQsoukWmUn root@cl-vbrg'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcHQfSVG8DM1qHp2ce73ZBWXknZGZFur5s27V58T7ON root@cl-opp'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIClnyNS5RQsbXmgOX7NU7i154DElOlha3y0ybF6FwScT root@cl-test'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN9juGhHhby43voUlTszqmhteuRl4pEWBGjypB1mmDfq root@cloud.akweb.de'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAjhcoyYp05x8cp0WxOqSMQmWP8Kk/JGqCYdjcym0oFY root@cp-01'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTgn7Wu9MC0ZlyYfZ4RtTImJu2BBAtsZ7DSt9cO/N2y root@cp-flr'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAguHJx7QJyFEb26ffG84oZ09rcvrWPoLZMIaAeZttHq root@d.mx'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDNzUe1NSR+r3RTQ11QMUudiyrAWVwWzsgAlxvxx43wN root@dc-opp'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICMHxvK5kzKgypVi8ZvshveSpyo0eSXiBCnAC5Pcjdgv root@discourse'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDy5WM1qsLE2SRwWG1Y38WJcMYUpL8MuQiraqiXfHzaH root@e.mx'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJPbony+4g4iFS32Cv/Bkmet4FsCAsrGTffwWm2eM16x root@git.warenform'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqqmBWh3qmnx41NiLCn1LhVG0mn4++IUvRNC0OMh6h6 root@gitoea'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBYFe6i0UdPRyENvfaJSJVCHtmnlJmhbqGEsdIlTapsj root@initiativenserver'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO886BNZ/o9aBwkKqHku+MjS5/GEVRBbXXSF76ry7oZR root@mail-cadus'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsPJQGHl1GVZ3yPl3Oi3xlH+EUsN1/EWDY2XAohag/P root@mail-fm'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICM4+Zvs5SY3E2cAMdnta1BujzudGg/97nz+nE5sipVD root@matomo-01'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDNIGI5HpfYnZCvDM3bf3UQti8SRhgL7wLu8LfxZLqwB root@meet.akweb.de'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINoLG5tE0tHh+iFRzellU80eJTxZfqDB3e6Dg4XRKBrA root@meet.oopen.de'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF2bxZZNXrlsvERYo0VyXzdW1AZuGmsTNjgF4oQJNfnn root@mm-irights'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILpKuS8DFuHHvfQZCHOGiurOvzlFkx1unnMfZWEM3wUY root@mm-rav'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMnwSzzSrAQJN3I0Y3xRU0rjlrO2KlHD3tFMgCqEyk0i root@mm'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMBTRzuXg2lzAERsNWpQYHEI1T6dP7VJehBPKF2pAsH4 root@o12'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFAyyyFaDWqjQjDFgOSW6cs71yxw7DRNFQapWMZXds03 root@o13'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJN6Z+3zYorB3NKO3TObynG8vn9xi1H8IBmadIOQBPE+ root@o13-cryptpad'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINgejUarJhSeXVswvyycIC62BIdGZWevz+Lr1spEJClR root@o13-git'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHIzL5IM0ljUs0b8lRv20qoZzPZRXVA5CKzGql42zPer root@o13-mail'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBIQfWW6et5x2DU7jG9iR+T6kbAipVxyjKuRksTtcvtb root@o13-mumble'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTxl1BwIslVhsiFCZeRlgwoSO2ahaHWwMeiKAIRFJm6 root@o13-pad'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBHl2xONyeBX/gnJ4iVeSVoxu/W6ku2VorA5gxAbp95q root@o13-staging-board'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBaXEVvhblxX045H2/B/6RJmoW77WOKJM5FQfvMUPCIs root@o13-web'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICcQ9MFqTMOmjnec4ftUJAYiAe8p7pp7a5EBSIM0A5ji root@o17'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC85aj16Ow1ZPutkp5TmZdxjMsECkhnO64ktc3OYZJHc root@o25-board'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICurG4lWMuEercht716M3x2KgsUYKIwku4VdF52sBu41 root@o21-oolm-db'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC4zWDGHh75cKB0AZKIbiWHosK4Xvk6vS2r/aChs8u42 root@o22'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGcgS05xGLPuECQ7E5zjzfSDxdFBO1mAjkSV2bktxld+ root@o23'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEM1SI7Lwk0G8UycysL7ZPdXm1DRGgPnr01B0ewRGEKi root@o24'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIES9ftVcNMv6pW2HDM12fIbOOEvq1fcd74kbO4LHfhGH root@o28'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE70FVVu2bsdH2qJITFVSDEPraiI4uSCuzEkYlbl6pRW root@o30'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOJvhepf3kho9zJz1QO52aLbr4/Rim/FLdENg1GNKCPx root@o32'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICMuN9gOcpjKIh468XkKJDkLqfHr3dAClpJQEHKgv16y root@o33'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOa43l92OhS5mCArXvIL1Ub3Oj6wu1esooaqoTNwWt7O root@o35'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKBSDsGwvvuxMbBsD8CIazWVZYDxZsrUP7SWvxtlJOA2 root@o36'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKzgTXbAtndo6ZhbBTiveznUoyRGbmNr2TTDvUTB4ikF root@o38'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEaU4dQebr9Zu9UUX9W9KIHBvlyKzIWPqY3Ta+wq5N6d root@o39'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwKlqSxMkU699gyHGrJwltGK81agT4hwlg38rnviN8X root@o40'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB4J/cF/pB9cWyWEKmyTkVEDocPHH3ZMNHdoiqcOmsfp root@o41'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDW54VI+M5SjV6dQLew/IA31RI1GOneIqg5dI1/VZQgJ root@o42'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII2b60T/OXKCoze083GsHXuMFtm8Zo3WnCFb9Q9ofGie root@o43'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMUnxlKIffm8a5BmoQE40h8ut0R6eCxcm+Iewv3evmE9 root@oolm-shop'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF4ylglAkPst7G6kES2lE96ECp0AGXGjzCVkZSqGVru6 root@oolm-shop-dev'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIUZ0WNd3rTqHH1tiXAELwssGw6xUP1ROdhgxKbMinYY root@oolm-web'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID82UUUkYKYFbJdmTcMYu+vl3M0FVQznXFbngqPoumP+ root@prometheus-nd'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBRfCFz6mPdn3TKVCgffHQAKt3LN/0srS/gBsMoOyZpi root@shop-agr'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHbeMf/CvAYIU/4UW8Ql59FgPo/3vcZ3vI3QzK2kOadE root@srv-cityslang'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINiVJ2QVuGz0bLlrJVa3CJ+DtwOv0pt6M53ipkGbW1JQ root@stolpersteine'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDVZ38bJGxecaM5cNj8U+3t1h7+qEEMyjNZ8hzwf2LIT root@test.mariadb'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGD79xl6N7GJVXKLdKTmuOp4LFuGLWjintKn1/jRSijN root@web-01'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBUaZJexZs5IgoaHtXe9BmP7F1lo1CoXPuY+u3Sy1KZg root@web.cadus.org'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBWTNSuBRncq7cK7JRvXDFZtY9SX4V27HrdJLI4MafHw root@web-02'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOfm+DaBXSQEqhBSCrLqtG4pykjqqvJFSONauO5Y4/nQ root@web-03'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIOzSjKX9dVlCN9GLvG3gtD201O+WlC8TgdtB+USk3bY root@web-04'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJplxgMsGCaiLf2KtHYW1Xp1U7D7geQn3fHci0GWZGi9 root@web-05'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPAUmUR9jN7rZcFGlBoURwhFJbEK7wtZOKsQiwJgYkBv root@web-06'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPzt5Gfw+BbB53qSXdzhLtzbCcp9vZSOtO0DB6PBKNwh root@web-07'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2ByQIUPa7F+AmU1swI3goQoS1dzlxVq3uMdVLkmqcn root@web-08'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBhsrYnt08oQ3bt/dU/uw9lpYhsUK7e+2GXZJO9aqufK root@web-09'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAHeAPDssTd+j9fOUt+fPtmt7s2ukFKTzig788I5tldH root@web-nd'
sudo_users:
- chris

View File

@ -1,490 +1,458 @@
$ANSIBLE_VAULT;1.1;AES256
64366536353433366261373236626231393366396638636237366532343030386466336166303066
3639623261623864336433363462363837313931383664360a393865306161326230316234613065
39316331653061353730383966363830356534666439316664656665366366366630383863393430
6233323630386232650a636439663639383835633736363330343563393932346261363533643830
33393561383463636561636662643535643131613065396562333837313661613031626136383936
61633634313535656565633139623531623635343863363962326235363464343634653231383634
37343063366264396538393737613964396562343335323066666561666633653733346238373937
36333439393264386263376535373136363934623439303231373633633962353062636362363531
65336433363930383137613531316431316332353235363133663631393961316565353531346431
37363331373463356431353464323466393035666666303936323032653130666133373761303463
39653866626138323430616637633262303232343464363265343361346161616362363865393831
30613466663865376432633536666239343464383061633937393938386239386237646563333465
66616639366265643130346161643530653433633665656362656264363136666138306332356136
64363962623232353437613265663031656464346434623661623465636430383463353566393430
39303233376430323535616134323532636339383265346433613139333137663730323962613338
63396633613130626536316364386337343732333736343861646164356366663561356135646566
36313834393663366364633733366639383439666434636163373163623037643035303839336138
65383063383535653665303061383964336662376266393539646630626266613134343262633965
35313464633361393863393836363134366639383731316531333566356461333061343730356361
38316638303562373866616237393839366263653735643136303637376461346664303739656332
61393531396464316434353139393763663161666162623934636336653132336533396138356363
32663665623130383635653338303061663138343334396238643935613431613238323536643433
30323834393731633363313636623435363835383865383139366137386238393737363231393736
62333933306639326465303538333366666339623238626231633630663134346533646338633038
35623336373463363763336566623731366337666361353034383939306338386635343133623666
35353363323237616136653362636335366436653865653237626536626161623138323565633138
36633039316135363466323165356561633536613334656362633036313738313239303164303830
64643231346630653234396638663533316663396236353233656238396663323531613536356538
66633564393430656533653537666465346532363861653531666336393462333635393731326461
65633861373262666238633464646330656438623132366531346338333335663735646666393830
33316163646665333739366231383630303230346161373833373965653164396230306639333039
37323363393931323037396639646462336231636265356435643031386338366435366638353834
30666637383461303539306463393565383330636264626463616135636239373433323363656136
30316632613635633566613266363463636533646162333031356365396134343336393232626432
33666535633736383238343836383765356439373039363634303836643163316137313933613738
30303765323937316233303031666238396333666636356434356565323536313633376633393430
64383532613866383537356136326465326366366139626165393438656536373862663064383038
66363937323833373563396565353634323738626131336562613531383532383462353063386634
66343861666130386337393364383566373637383564613031336564623664613039633661643061
35633665663763336533386532666630613031306433623930643638663364393138363362396466
33343433306264363566636237656565303737376436633365623030333532623534376532656662
65323339316336633436353633626537326631393066663865666235306237386537306330643064
34656463653639336332363639666565636663623765303338626263306337653638383866613034
33643461613030323134616562336261326236373064393562623761666439316230333130323737
63313932383931313231623633646365373961666234393164346634306231326264343666643564
33333961653935343663623333366439656263663465383937663938656262333930393932303839
36303138303239356338326139626131343161643561383663656463346237623834313265326666
35333036353263393931636535353534383362613739383264373366393162613763623064643762
30346437323662303130306239316563336437376463303233623737653036376636636536616335
32383233366634663037353432393830363236623930663065383866663233356634656639663734
30303337663864646564386334343232303061373539653138366561343232643338623465333039
65636661393765343831336161373762616433623763636135646364623239393261393337323033
38313461323764303135613035343630653231393863386439303639623666613162346338323030
30333364393232393962663663646530306330373836633364333039333533393636303761366130
63303063326162336330346535323162303766386133373131326237333137626332626533303265
64666131303730613638323862336132636535306335383761666466626265333865393532333036
36346531366138376537656666626530623632623233336438623465363965633033636563636639
30353130333263626237396130626336353330643162393338323236366230663838326263633330
33373764316132323834633138333265333831363561656336316436313639306264323239366235
66313835366665326637363138643133633833346130656432613932373730336531396564613362
35363539643337303436663032383061626337363965383462363633363433326638666333336132
35643637643132623739613133373963393663633566323632643939383966316531333535386264
31623061656264326565346238613533313961313536653766356333316231363638386264386666
65353931366166396439303331363133353036343032346130393236626338323530363639616266
32643234653830323436363737393934653362366537363639376661336634356165323166653030
37316435656239396438663566313636653563383631636463343866616230666363333466393935
31396537316166393162653435636637303962626433386137623662623833363531373362613736
63636635386233613162313837356535346466363631323731386262396638373665306638373639
30333332653663313961656331333063643562343265306433356631653064373833373731356434
31616336353533343734326661353434343930383231613138383663323365373066326538386361
31396661376464306436633537383535303338313062333132336133363233363134613230653861
32666636626132383261333339303766336662373132393331333333376533396263326432353238
33643265613738366533656666333535616130303862323131343965303231326465303630383363
61316161633938666135643461373161376462643434323839333932393031353533303030616139
64623434363530373962636538356361333235366463353364383033623565303832646461366332
37373263383433656630653430653361313062386230393438633739336531633165313632316635
34646637316135393065653832623836643534363064663638343065343732646436656366376433
33613134386531646166633062396338663765373239633330643238356136373164306330383631
39336364633664383333336232646564633366313332303733623239363131643738316262633164
39346330366161336532366461646338306239333162633961363233353636623835616630363235
35633161336632353764613065646539646336663937343036383438396231366636653433626565
39326131323561643537376337656165353836336235333037393564616339666530343533396365
63653465383438353133663163663835623763353361653637383738666538646364363135356537
66653162343537316438663937643337396361393764373131313463393730616265376136343337
31313331326139306132633833363065326363656332306363303561623736663462343537663832
62383634656532346135336266633865303036326430366562666562336237333262613034386264
61616334653262316631356332363038356561333031633865613331366237643730626339626563
66646139386566646263343734643832333032393639343266373236353832666630646338623839
62346465616634663363356139363033313535333139656164323738653130323061623932303363
66613235373037653639356465373366316263383835313462326631663565343334363930616330
31343533643839386462343463326334343631626238383464393362303538393637626333633366
64666534316131626633386436373862316539363735633561613736653363303935633736386135
63616632303663636335643063343133393237343965626163333864386533376266386630326338
39363363373366323237656265353663656562646538373234623034376339393564376638663730
61356263303738373366663064346536633735633062383838623231363836656439646661313232
35616230376538623531663336663632336330656531623561323236326164333266316563306462
65353466636136646164646531336530313139303761636437393565323861333933393834316130
65636362323933373934313332626338343837613464343134626364633762363231333939316162
36353036386130636339396561353262396261303865363734386261336261626563613735393734
37323839333465613037313664623539396537393036366665316535613939323438306138666262
35636362613263626237396138366461303261316266326230373364653234653438623933663437
63303135326331373139633462333832393935383062363362643935313431313263626265343630
34623266643261306635646233653235336462323465393837346164353734633766353538373031
63623061653063316636313135363734353865623439333035633035316130393233653563383137
62653430326131333636333635343964376333653231623332623235316466626533656266616137
62363662376532316261303533383231363066383666643033323730666630613165323634343530
31373863663662643038633933366231383933323634346665343161366363396165656338363034
66643439626666303834656466663637306439313030613834636461656365316237316334343162
38323563656636313465333231643663343034396631663639336334646564613133343365343936
35363565353232616161626565363666666237396163326231363661346166343236393863353763
32356138393236366131633833623561643630336465393539323766643861633437323961663939
66393530393962366263616437336164343864306532613833646336646332383863663733343666
39353935373566306561313932663531656530343732383664393831383035313831643331363664
37323739616365623138333863323635653164323637653731666233613932363536613833393938
30663962353561303966346637333734386265653038323530316234623935656133383537633339
62366435383530336231373265316337326666663235613038313766653334346538333931363739
39333663376161373864326232333436666335376366303435303361343237666564633439373434
37356263353761393732363635396233613830376561363739323132343038303564386634636462
36343930393334623937666563333132303839313862383336383034623931383238383835356261
36376433346565623832663535633633613431326333386332316236656264306137663736633063
30636231636432306165313165316432323365313864383961663831306233343739623232653361
39303531363338303136386338393232656664303137353961663463323434343233353465646136
37363333376361653937623462313061363562333662373737346163623033323339373162633639
38343634386464623931383063366264616661303234643064616338666230336436666633623235
63653164633366383930333232636139353838373062326663643231346237343930653032306433
30653037613834643036633934373433613561363461383934666433303163613062353138323737
62343363353664626565313835353865663566376339626561343162623066396537333930313738
64376463653062373365343739346538396331346466633163393961646265613436383133373465
61623239643566316566623134653733343861353138613165363265393636633265623463323439
37396636383737616132313363333336666339643761653561373062393232326262303639316636
39646630336334656334626439613966303738396665666635346239633338373738613066343332
65613733623335333334303862643964383265333334343037353363616537633932643635643037
34373937356133333936663239373066663465343537653562626266383630336662336463366130
66383766646663383539663762643330346466316539363438653465316366386462376365646266
36333363333334373262353865633462346136303338323334386163316336373333386538363134
31666536656164313032343262396662333464363230376430653831366632623433376534623737
37643863666133653165366535653837303035356235353764393936646234376362643231323530
35663761623836376161303334653734366634303462393236396165353830366631663366343765
33666664623239353261323738333366396136316231663034303965663861333534653563656162
65613133633834376238663263653531343237323666333466643937336138303166346331353861
36383662653666376662336135383032633833653663303562653064616338643437646635623562
36353430396230646439623831383161646464333865333565393933623735353938313462306465
62653063653332323532646161623164666231356535643431656638363531626666396536326639
38383934316638353032363434613531626530383261666135383034386432633531373130306630
33646334656365616437353935396633633763336166373239326431626130646238316361363931
32366331333664316238333239653165653561653763346561333631616137366265333064653861
36323333613032643234316638346439376131636235376435393632393162323066383730313135
64306661343137363233633335653034356334656530636132393665303236656566313361656135
62303661623333383330303538376462336633616533343137633735353935336431646563373833
35313736316333353738336163333464633839663030613264373066633135306561643865333830
36393238636138326337663961626433363863663939653338353231316435333139366566346662
39626337396238346633343561666463303135323065306631646666353566616461613666356161
30396232386661316430643730623631333034323835323736623534396335343437356464326538
62653461663438643337333964313763346637386231663736313437323030653034303534336231
64303261323934666431306661323730343238383362636436373336626464343063613562343135
33636663323834663438643430383433326133306339653934313730323037623737383331363363
32643064323433383735346435353136313631363933356530333839366435326633623835613636
61306661663036636639303138613861383737376361343365643362303634326666333261613234
62393839616136366330303466353962396539386464376439363564313062356266383634393565
32376565366636643238613036333032623533313766613633393933666432326363333737333732
37313237383231336639353061626438393861363535633765386534313631353964663630613137
65316638383835363038363261643930613361313637626261646561623038343735333437636333
65323032396463363666313837366165653131623132323331343364386238376334663837623032
32386432376165336162303366306238316334303761303431333533306261396534383539336132
64666631636334396430663364313565666466336662316263366662333434353461623232306634
36356361613533656163666236366662326563353232326537646137636164333662653464363333
36393761653435353132643631623863363535633335663965343965363962353136373134626537
38396161343364616163303063346364636466643965623934613338383839626637663932373465
65343930633232373133366162386235373265653934386530666532343734356462613264356336
33393264613336316135616161653831373730306161393337333061643064623464393162623733
39363166366236356463373531616663333061653236356564653735653034663662343335636435
66643162386130393139653839376331326338393933376663346330346333636237393365363064
64663437326630663334663866366664663933633263323434353737306333633530313331383162
34326635616236636532616131323262653364333565613062396366613239353863326261356566
61333364396238363563363366336534346662353862343864393435633430666235323939333435
30626535363232333130396362653961616137313531616534373261643737323336313232656539
39363439323134616133336363653237363437663563306138646565326633393362623165393237
65616436346338343562376334363030646563363063663934656539613363666533383365656661
35353733313337356430356262353237376137393930386331373333326262336334653032666134
32636564366435666632656361663132333438616234333733393536346635666363303561353664
33343166346261623933663461393032396434633436336462396163313733386563626539656262
39333539336239646562326166353837616139323733626632656464613762656662373566303466
35626436303733343939333038373634346330613366303761376131386565643932313037343237
37666239336434313336626365343535306662356663303964353933333561653335626330393431
62613136633738633639333530303431636235376135636231316565336539313662303232313562
36363433626331336236396565656238363737303535313964326162333565623538393261626465
61373130346564346535633430303334663330356537643161326661613231643732613534303339
61636232666433633863393134613335653863393232333336333664353737386663636633383737
36623831326162313437643038376536353138383732303838353138303832663334313631636138
39366564363130373165353830393434346632323437366636643466316633366130613866633136
63366239653631343235356361313930336563356266356636353866306265376566666562653031
37626561306236613635643439646535303739323363653934393464643736356639353033383366
64613038356337326639376566316634663137386461303234633433313366316264323136373830
61306236376635663331343237373531356439633137636231616234666565356364643566646163
30613137316438393436363935616666313838353464383364363165303330353563626537623766
64353539383266323333343339366336366632356534393663346636633934306534383239626666
64396432343366663130373063366632313633653865646331323764303734356462363637653463
62353831633235323963613063646462383763323836323631623339636635663732383561646661
32343965643638303532373366323965363430636566333462653633653361393762366135613465
38353566373565616239363266656162373034343063326366316231643233356262386433376139
62336566396431393937323461373063646539643530626334636237323365303162383534666137
30303062396464393266353338363033623638356561353730643735663263323366383233316230
32636139636535356566643737383434386139326163383236323535623466393436656230643165
64643130303063393064626435396161356664626136393863653436653833386539373033353364
66313030663332333763323166313665373663363535613263343939663631666434323433303939
31303334383135653561613032366266653863663164303731653765663062353838653263383730
63306162643666646536373139663335656633666539386230356632346664316365376232333538
39383932346561623664633465333566366363396666353539383264643937353637396462306161
36643434326566666133356336303266656232313634616234613135613437333538666335373663
34343562353561373663643536383933613337343161636638373964643661376466373937666531
38316335386331633263663330363532303464343062303738383964343838373565646137363634
34386636346433323666366635643936663630373030653637316663653265363035383639353334
36626138366461616638623466643734663364366633653662636537623565373033646361353534
34613362626665636465393465306265343435333262363066303562663233343066333463383962
31303738663130326536336230343661336431306430333763303064313465393363393063386264
65643835343338633237306462346638313462666139353861636634656533313336626537313466
62653031343264323462326232623535316130326332316639653965373363306334313534373239
37623636313630316136656639316665343833383036333465326639386534653133353964366133
61633433366664306564613162376662393863326266633965633235353331363031333963373162
34376531373030373937366566343735643638633237666562383965643335653662383333303863
64373432383232353966353534386461663030393764373763313837613238623537393862393065
61323864303935373065303932643238646564316239353964313038336362356563613239346631
31326634383463373633303030623833353931616533303630303233616633646530356337366561
66306263376437303361613563313663313062363863386432646365643531333161656464643766
63666637386238373533316130366532366537393062323962653032316136393162346430366262
38373138343261626637363266313262353432396331646430386131636233613730343965656664
38663166396236363235383966633565666235376639353264303335346662363935373431316635
37376161376566313935306130623434376462336131313638333065653735353034343630373433
66353166653033323139363336633966303633383239363963356336356435353065303735666531
33393261666632643162356366323236373636306131386638393662373131366135633838353832
35653130303862656563343937386434643632336562663431363264383932363635366562633735
64636365646162316137386461646431633135363937336236326666653466323865666132613931
35643533336435313037363436346662323764623039326464356338383136343864383662656166
62356563633339313539663661353531323365333166396233383963353132653364366433663235
35306631616265346662326363633135623132323331336366346334356536373535666236306230
33393731646561653164373836303663396334623266666566666137336537356366323062663531
38323638363763376264663633613634343537353038393632333031316635393161323733383839
31613833616233356266326135626136336464376332633837363937633535313466363063633737
31343364306631303763306637393565613831316465316531633032623932383365346232663735
64313434373832313733633463383831383630643338643934653064626265343766656237396530
30366237616330323935653832323031653437376630643239353962393537363236633166663062
39313664656134363032363832346132386266366430396130356166376539636237393862656130
62643338363635633664356233643630313263643066346561626434656639336133326665306231
35323963343835333365353931626430373564396539636439633732386432623337353332666163
34353861363165653235363938346238303361646534303138323261666335363639623066393163
64653330646437663831653134373534623736343631323063323133383564326631666263653063
37306162373639666266633262643034666134643066633638353338666662643437366365386466
35323665663863633862633361666234383465663634326634393232303761333336376637633262
38303238393564396566653031626266373963356361626537356236303264623636373062373561
37623935313738633962366661636537313064306362393234643039636634623838303737383930
38626561636361393965306338346333383264343064343137396232313463356662613530346638
37353936356664373934623866623266373030623839376630323564383362373236663630626230
31326230613530363838633765353337383762373966616161666261626462643663653333663332
66336539643537316234303465393234616539313036356163666661663531376633316331643931
32353763313865643166326632323034653039646436356261356163373961336435323866653631
61316662383566356561666435653232623233363637343438396335653530666335666163323663
65613664376433313234316333333833323731643861323533326264326331653165313830643030
61663933346365646636316262336235656130393731363138666331623062383531623030306136
36333035356630316234343836363362633632393831383233346463393634353734363066643865
63613436646463653165616335653262346535666361646439383963363162363936646165633035
66316337313736313963626661313062623638666637376135383164303633303864653138356130
66363730386130326638353438356138393131333564633664336363653438336131646164396233
37666330623833646464663762396362373931323063656631303338323730373662333436653163
63626134323563633034353361616333343634643034356362346533663532306662366539303032
33313038663466623433343565386235383835643630373161356138656664393766303364666430
30646436343338363433343438363466646361346532326230613931393335636632333430653363
35613639336465613239353539356266653139313962663137326135393033393935393861636466
34333732333633363230343664613036336137353231336261623733396434363930353834393434
30303263386362393935653636356333613166333937306333353131636533333664386363616264
31616231343663623965303366366237663437346630363532396332336338613764623661363731
34303033383566666230343235393736326137343437313337366534383331643038646364323264
65363365633164313636343331653363643766316564353732636638386361333565306139303865
31663632393531623939613533666261646530346139363631383533636465343261666630363430
39376137313062303935373964363962663732663734646538393135636537663739363030396462
63343363323462383433366433346564383138643263613637623430663733343566666133353938
38666239366162383562363863626562366531383538626465303062343036383732643361303533
34386339383531613233336538356235373731323634646438376462656135306337366434343665
61306661666461366336613134616264333535356130366337663439333033366332643834383331
62366662616338363363656662303466316436393661373939386661393864343831316632376433
62353636616632353865393333663238353834623338393266346330386164613334343834396661
35663561613864616337353134383435393334373863643931323637323964306165643233353531
37343166306134393462396437393031303766663631396466616465386538653364663961643331
31343133366664363135613763316362613862623235626531313332376233633864346538663534
32623336313639333436373035326439633635653730353137666233343065373238356262313833
36643566313630626332366631363639323039313630643234363837383431646262356264396439
61383866646137306263623534666532393862393330323630663534633061306263383065323565
33303635323363353138613361353666396464333862336162623165343932383731646439343830
34343939383933376431306563643733626234663534636634636238363535653762393364373061
63356339663566366661653433393463653837633166386438336230373666386165623362316439
33313266373932633735333837333233303035656130303330366239643665613533613330666134
30666134353532626338356565373338346461383234666264363332313933623933383130623062
37373165386630613239323632326365383663316130356132656332656633643738353062313665
33646263353433303233336334393735383661633633653033393863353865383238373632666135
65643362313539333031663263333366643432373634326638353465366438373833376365373838
35353861623539386339626564626637323062333936376539656238333764353362663465373162
34636363653135653634353163643765306463376439383866373335353035356662346433303266
62313963363237636665333766353463383765626364306131376630386465393666616139613631
64363739363032386231646537356239313866613337623466373566306461323433666466666566
65303938386161663433663538613630393734363266303931396463663265373163383439383766
31613737303665373666323432646537366235386434316361636439323034303735623865626566
66303865633733663132663862646135656161663463323830633337353830326466336263393832
62393739356332623562653037663739313963623832356563356363633264353834353037666266
61336233666565356235636332613439363138333632383163366566646438326437376234663234
62663461393434326338623561653761306665336130666431393334383034616535383666653034
33346538316138396164346238383330376635353337646232623862393262636466336530353334
33393961396430363134306337386630363737643962353739346231313734306339376430393332
34373431326631623034613761353832343431376334323130633764396532653465663835376539
62343435623863396564366564333739343733333438343538396433383164633835613730383466
37646239626566656364663432303433616366316462396664366666623662373162666234373138
38383864346439653862373862376165613037643833396664346633623534376635356333386334
35333930306437663462643065623861643365306336306132313663336637313036666637626339
33353733646135373038626230366464396463306538326461313339626130616361373261643535
37363134653438343734653030363537316364666535653833643563346230636438646665363536
62386266353133356337653630383435616230383963343464656661663637373538616162313430
38613562343634386637313632633135323537356338353836633762336337616136613639383662
32393533346538396137653139373632643935396563663262353866373731316334383238323932
31643833376533353262373030666236626361376364613332623464643432313364303033373634
65613638356361373161383530636338346465613031363464613731303566383862643864326462
64303632383866383966646563643334623337353661393833356536616161353134623530373333
32313965313265643862633530333133333238643562356465336466363761633965373636656161
66336531313137303865323763366238326530353233323432623037386637646230643437636530
65333832323162623531643339346665396566646232383730383930623665323338383363643534
32653235343066353439616337373764613735353231366636623730336235343434306138376663
38356333636233313262333131613537316632356236383833353362393062366461616236663633
36376463343837373464366635333038373866303530626263393632363264346233306266343164
35313332343165616630393334353462393638636366343633353263643935653033386639636334
33633034336533646366333766306634323830383337333765616232623466613635396430633131
34633366323136663837643435363765346437323430326532613063633939306463616531663164
31323862613436613632326530343835353165313334636562346263343335393631636563323330
33623132363630626431363230623263353032366534316665623731626438613063666331613266
64666536366263663235366631353633326562626663366561326430643238383832313461636332
37636537363933366262626264393638343835663962363161333139633764653133366565336439
35626462653936626138326637646464646561666333626263356465326663343366343833653234
30663234653262303363613865323862303938666435323965616631616334393134353733333438
30336631643738313035373766663638343931636338376366383632613961666439623834323865
66646363363831303265616639393739323166333761333232613336383465356361306564613864
37366237353436326166376235383535336366623062333465633636396665646531393465363133
31376663633238633733633861663666633466633430373732306463666261333930343162346563
61363030656465643836633261646663373236336561356564326465313531353263396335363362
37303331376564386266303336623962333963663531326165623161353930626132663038366164
62396266303939333335643165393539386236326235353961633438316238633330376432333465
64663030303135313962353633366535333139396234633066643637626163353464613261316563
66653465613863393963383639646262383364633966653862636238393932653962373336623932
36393963303961323431656139373961303966626165636231663637353033303262653432363930
31633235336164376232376535653064333733303063366535663939356664626639363037653061
33663435303231353432303464643330366562366162346462643861356562623763373737326330
63363038346365366132643662363262646266373530383238306232663236323862326135653565
36383361623238313363333033366562396461616135643639616135343662386531383539663436
62633139333937316563366565353066393866613065353035346665333265383530666566363035
34396533643030653561626164646233613931353434636236353837316463663066313532393865
66303938623730666236333138393362356265363430623232383137313934633935623939336232
31346338363632333538613464613936326333323537333635633562666661343330633839623763
63343663633562366464343765643864613366323630323533653330326132656465373139336431
33393335633530363666353031626566393861363166323839373766303639383262626664313137
32666632643864653133333862333035386261356436666535633939636666613637393330643664
66386362316135636437303936616435343866663331343533643139333034323261666164333334
64323865333232383033306566303732306536653534656530353237653434336362616337346530
33383766383135653265623034613134306336323939386433363039643462363834636537613562
39376663623865643435326431323836366437623536656437656562363931343232636633376137
39353363396638323733653236313563383232386366643237333131353634383736363662313264
64353431623763313433623138303033643338353134346234343430633431353634363961386465
66373861306362653533316332666461336662636330393162326633663838383738383939343834
39336231653230663334353765336333333234383464326432363235346639376637303932396131
38363639353465313336633238303734333332376162303831653734653830386338356164383762
37343534396234623862613365613239376463326365386238336638303337313263623835643731
33323832306232656337633038306538623730656263623861663965363533643066356562636661
35343166326235633861366362346262626137373864386164303365336266323865303163643730
36303538323066643164666638383461653738653530356235376165663939653061393435623732
31333132396566346432633265343261313666323363653761643534653661636166303330646163
36343361623631353132323232613237653633643332396533313965653463663030316331326233
36323237613831303266353736653564636437313862653836643135613331623532356133666637
35656333643661623438353830343337613632373466616530373261613135393261656661316639
64343866616337393538326139373037653536393538343432643233363635383363616436646331
35363730643562356532353336646635656566376339353639646133353132623037353932353137
35363239633637326637363662323164353737626330306262633339656464363230353439313632
31343736323336636662666638666530346537316364373363333538393963326235313564643133
38346138653332663836383835366633346263333330666563313763366532613631396330333232
63333364333234663731323734323062663839646433333438343465303933326366353938316135
30643935393539346239383034353333353563333135333561356434643965303136656135643263
33626536626430316533643230326162313535323038663566383836333933633965373466343339
31356637316132613431376661663839343635646636353238313162343265616530623538666662
31336534626633643964666238383730323537333462656632633233326631643235333630313261
39383735636366346266303836616437626236396634656661663866643730613133643639663665
61363965383963313564393937656164386539373062323665653333313033353165653535663137
30326562626434396261383830616333383335363436656536376330383662656663376538396638
64346434636162356262666362626135636436653539623561323239656137383339616338373561
63386438616636333663666565376566386264376234623935343065386235336564633336653730
34366332366166313736353561613963633065653362376465313634316239303565613635313966
63396264623932353531316239613839396138353434396162363638353361633638663766653365
61303462633762376133303337633235616462616530626666666662383032656532323139656237
61393765396139666634366635326566646431303863356130366232663432363139393465376463
31363464393166653633353439663466393335626331383630613564633365393037626437663232
32313261313736386638333032633665636339353939656434656365656466393734363035356532
33313262636561353035353534303037303331323262656435376431613662313232623035356235
38653436646161376636306338376538633064353830396137616239333638663536373935333762
31653738323539323639303130643935303663363365613731383166306532626334343132663033
61363861386631396463393539633639353738313365336630376265633765323632373364643739
30346531653636363030323136633464373438336563363962383339656535306234306133623362
63323931656534303837343436613865393730363632343364336137633564336531336665393161
36623366653062396666643838356432353835363165386432653063343533386361353861656135
66313733386238623337303261356433346632336263396463326232306234643431663232303633
65653264623134346237346630386138333864646234333164353032383139663564663237666361
62366233633536373661383731376333353363366531653033613866366665303066376663643831
65343634313431626136353937613535346536643363386536353064376133643036303961383465
33366136303866626165666465313836333031396439363734323365363134353531346262376464
66616464333863663134383865383165376630373366303036356661326336343730633130643333
37383765313533366161653837623731343736323662396666356537626661396532633939353730
66636465613537663966626338626234343439656536616335653063653933303636623032383135
32316334633631663637643961363264303139373663386239313233646632633139666330383965
38626564336566633965346562663733303338333662663735313365393130306264313633636466
39656535656139646632303132316532396632386532643034393034343761653237626138646334
32623034346630383336626662366364343736373663643661313039663937396263653661366232
64613863343962363235616537343265366531343761666337616435353330643662313039636339
39393830363033363465396138646366353236336638643061346362633665326261653133316532
66333831303962336263393064336332363662333232303536326337303261303637323963333931
39666433343532623837376530386431646561326134633930613534323139663034346162363836
36396361613666366232646334626365366230653332656364616436363631643438383966306364
62363732623363353239333830633161626465313734323633346161633937366137336239373633
36323562383339666364643232323532376135613631326639626135353231396464643761393762
63383139666531336133393161656465323831383835393665353862633437616666616464363834
34646239306664333735313861346236396235653238343238316161633966396630393238376136
34313164366664343734666535373964636539336164316135633262346439353433363065363264
66633166383332613233306438343633656235636236623730613764623639363362353263623637
33346533316561376537346132633836376339356430623731626334376335396464396130366332
35363664653765326166353930656663616666346339386138336631376235613531333138653062
37643336396137303336346665313062626436653039363838623061363961616531636464633531
63306138316362303339333434653563626136376331393132376539356239393834656633616531
65326531306633626464353765323464373831363133643431363061316563633034353038306135
65666130333930646332313331666139303231316461623039626462333061343965393830353230
38613634613534633362353866303366376230373763376366666339313431393766323065353463
32646261663038636333336562623239666465653666366336666133626666623236326333643734
34356636343265366165363034376436623837363336306132373131643634353134646462383738
35393239303637663766373535383931383632373963666532626632323433333538643430383134
38303964656139626465353736393236626438376565363032363065666164636662393537386364
66303164343531343237356439323966643465396136323362313266363362303766613831336565
35623335393239643031386138643464623466643536393262643965353336303433656436306333
30363134343830396133666263363935383033396237623237313264336436393061336662393435
63356463626431616461663533666333646434363735353661363364343030346639326432303335
64663865366430323534366165336132613636373330636331383032353961323939613265346566
64353266666531316562313233646337663434363039633966633830626665333134323932363030
65393336306136303264326363633037613935383261396532663762396361666534636332343235
61646535643365376362666233623066323238633039333737663162386638333739353239363632
31396230303636386433353166396534303164313238333666326566376233393533666134303438
33333164313763663932343339343534356131383963643862623862663063383366343639383161
32376235363161633431306162333962646235653064353835616134306431336134343837383035
66306439633462323064313931386235616338346431386434626433356263316337376234356330
66623364356135623262376138643861656364353438646235363164356438623537323232306533
39636134383631363137333635633635626234366666656433383933623863376534343565663061
65303062643038653763646461333461623864376237333231336238333639366439643861383837
35666235356461373861393764613239363563336137653233313835626465333635663735653564
63303264343132376530346364343465653238633936383735613237623835333935366139663638
30396237663635353065653162313839633433663665346566376439663565313338373961643630
30363133343839656335313632636635613534646339356235346661313863373665623564333638
37313237316364366532356236346638353234383733313039316234333461666666306164363632
66653765306366623331376332326134333137653863626164623238326135396266353534616464
62393438353538303438653636363634343161303665366635626135613433333466303166313566
66333738356135383664313435386338363139353835306465386334333430383164353832636633
65326333643966376263326636313430646164353737663863333162353266383433643430366638
62336139313436366138303230383934323361373339663133306439393839356165616163326231
61623038653264653135613266373139636366653936376561313664623432363163323035646238
38366335376666633831646338323662633366313866333366333239656665313338376230386564
36643430333665383535313836336364333161613364363761633564633134366331343734623764
39366266316330653830313335336335366537623963396262373334303663626532656535353538
65366664306132376462636634623135373865373237313762666637316332613930336430623233
66663335353037623730616632396135316365316639316234316530626431376233363162633663
39346138343732666435623832613737366530623031626164643163643937376465633636373038
31663732383139376338356238386435373063343831653265623633633139323464636131323632
36396237643465646132393237343366323233636134633564313966633734333435386266653566
37643137333239643939613030346630386135326237383563666533383562393637373336656362
30616135313536623234643431316231386362373434313334646435356132313866613762356263
34346330643430333332393664346339393762656437396539303137633163333836386131356637
30623637636365646532366530323632333430326334323134396464303730656337363565386130
30666532666166616637383735366538393331633933323763346362346664306630633935313336
66363037663865356432393365626132633766613262616334313131386238643431313762366237
32303436346463393462646332613432616134663530346433633866373833633439646634663061
36383737663065643533663532353131336336613965666530636432303735373632643637336333
62623361383263363866333637663365306231353035643264333833383233326662343137316462
66373539306664393034303937353333333662393562663935356134363030613131376265396166
33363162383533313766366238313333343266663865306531323835323232383438663131646133
34613634396437663132356232326431303165303236623465326664333164373330373733363238
61376432303130623964393232303731343463343664326238326666376238343139616331303936
35393463396166353235656565636363333238363661393734333964323632336565363562396138
35383864376334313735336364343865313732383162303233366332343964393634643064343636
38663632306239353039313663326634653932626533376233346662326664613536383365383233
35326661656165666536373561616464383935396361663437316636616363333363656438313562
32653433623061363232396432396165653432336637393839393364633862343734323062623735
31306631356562653364316233663831383762363362623736666435353636323965366532643631
65613836663061643638313461346462636638653230666262306334386264313430653333336437
3137
---
# ---
# vars used by roles/network_interfaces
# ---
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
- vlan
- bridge-utils
- ifmetric
- ifupdown
- ifenslave
network_interfaces:
- device: eno1
# use only once per device (for the first device entry)
headline: eno1 - The primary network interface
# auto & allow are only used for the first device entry
allow: [] # array of allow-[stanzas] eg. allow-hotplug
auto: true
family: inet
method: static
description:
address: 192.168.62.10
netmask: 24
gateway: 192.168.62.254
# optional dns settings nameservers: []
#
# nameservers:
# - 194.150.168.168 # dns.as250.net
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
nameservers:
- 192.168.62.1
search: opp.netz
# ---
# vars used by roles/ansible_dependencies
# ---
# ---
# vars used by roles/ansible_user
# ---
# ---
# vars used by roles/common/tasks/basic.yml
# ---
# ---
# vars used by roles/common/tasks/sshd.yml
# ---
# ---
# vars used by roles/common/tasks/apt.yml
# ---
# ---
# vars used by roles/common/tasks/systemd-resolved.yml
# ---
systemd_resolved: true
# CyberGhost - Schnelle Verbindung mit Keine-Logs-Datenschutzrichtlinie
# Primäre DNS-Adresse: 38.132.106.139
# Sekundäre DNS-Adresse: 194.187.251.67
#
# Cloudflare (USA) Bester kostenloser DNS-Server für Gaming mit zuverlässigen Verbindungen
# primäre DNS-Adresse
# IPv4: 1.1.1.1
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
# IPv6: 2001:4860:4860::8888
# sekundäre DNS-Adresse
# IPv4: 8.8.4.4
# IPv6: 2001:4860:4860::8844
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
# IPv4: 185.150.99.255
# IPv6: 2001:678:ed0:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
resolved_nameserver:
- 192.168.62.1
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
resolved_domains:
- ~.
- opp.netz
resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 172.16.62.254
# ---
# vars used by roles/common/tasks/cron.yml
# ---
cron_user_special_time_entries:
- name: "Restart DNS Cache service 'systemd-resolved'"
special_time: reboot
job: "sleep 10 ; /bin/systemctl restart systemd-resolved"
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
# ---
# vars used by roles/common/tasks/users-systemfiles.yml
# ---
# ---
# vars used by roles/common/tasks/webadmin-user.yml
# ---
# ---
# vars used by roles/common/tasks/sudoers.yml
# ---
#
# see: roles/common/tasks/vars
# ---
# vars used by roles/common/tasks/caching-nameserver.yml
# ---
# ---
# vars used by roles/common/tasks/git.yml
# ---
# ---
# vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml
# ---
samba_server_ip: 192.168.62.10
samba_server_cidr_prefix: 24
samba_workgroup: OPP
samba_netbios_name: ZAPATA
samba_server_min_protocol: !!str NT1
samba_groups:
- name: buero
group_id: 1100
- name: beratung
group_id: 1110
- name: verwaltung
group_id: 1120
samba_user:
- name: alba
groups:
- buero
- beratung
password: '4l#3a=behandlg'
- name: almut
groups:
- buero
- beratung
- verwaltung
password: 'Tax!ko11ekt!v'
- name: anika
groups:
- buero
- beratung
password: '4n1k4*adb_23'
- name: anne
groups:
- buero
- beratung
password: 'antilottka110'
- name: birgit
groups:
- buero
- beratung
password: '6/shd9c2.cHE'
# passwort unbekannt
- name: chris
groups:
- buero
- verwaltung
password: !vault |
$ANSIBLE_VAULT;1.1;AES256
63643330373231636537366333326630333265303265653933613835656262323863363038653234
3462653135633266373439626263356636646637643035340a653466356235346663626163306363
61313164643061306433643738643563303036646334376536626531383965303036386162393832
6631333038306462610a356535633265633563633962333137326533633834636331343562633765
3631
- name: cristina
groups:
- buero
- beratung
password: '20_cristina_18!'
- name: dori
groups:
- buero
- beratung
password: 'K4lt3r_hUnD'
- name: drucker
groups:
- buero
password: '20-printer-18'
- name: hannes
groups:
- buero
- beratung
password: 'U24Pdm-2'
- name: joschka
groups:
- buero
- beratung
password: '20_joschka_15'
- name: judith
groups:
- buero
- beratung
- verwaltung
password: '20judith14'
- name: julian
groups:
- buero
- beratung
password: 'Jul14n_2018'
- name: juliana
groups:
- buero
- beratung
password: '24-Jul!ana#OPP'
- name: lavinia
groups:
- buero
- beratung
password: '20!lavinia*20'
- name: luise
groups:
- buero
- beratung
password: '24_s.l.h._adb'
- name: magdalena
groups:
- buero
- beratung
password: 'magdalena_23'
- name: marcus
groups:
- buero
- beratung
- verwaltung
password: ''
- name: maria
groups:
- buero
- beratung
password: 'm4ri4+adb22'
- name: martin
groups:
- buero
- beratung
password: '20_martin_18'
- name: opp
groups:
- buero
- beratung
- verwaltung
password: 'DaWirdIhnenGeholfen!'
- name: opp7
groups:
- buero
- beratung
- verwaltung
password: '20_opp6_19!'
- name: paul
groups:
- buero
- beratung
password: '#polsfuss*adb24'
- name: praktikum
groups:
- buero
password: 'praktikant*in_00p'
- name: robin
groups:
- buero
- beratung
password: 'Schattenber!cht#53'
- name: samantha
groups:
- buero
- beratung
password: 'art_12*lvbbg+adb'
- name: simon
groups:
- buero
- beratung
password: '20_simon_18!'
- name: ute
groups:
- buero
- beratung
password: '23_ut3*obs'
base_home: /home
# remove_samba_users:
# - name: name1
# - name: name2
#
# remove_samba_users: []
remove_samba_users:
- name: unknown
samba_shares:
- name: buero
comment: Büro auf Fileserver
path: /data/samba/OPP/buero
group_valid_users: buero
group_write_list: buero
file_create_mask: !!str 660
dir_create_mask: !!str 2770
vfs_object_recycle: true
recycle_path: '@Recycle'
- name: beratung
comment: Beratung auf Fileserver
path: /data/samba/OPP/beratung
group_valid_users: beratung
group_write_list: beratung
file_create_mask: !!str 660
dir_create_mask: !!str 2770
vfs_object_recycle: true
recycle_path: '@Recycle'
- name: verwaltung
comment: Verwaltung auf Fileserver
path: /data/samba/OPP/verwaltung
group_valid_users: verwaltung
group_write_list: verwaltung
file_create_mask: !!str 0660
dir_create_mask: !!str 2770
vfs_object_recycle: true
recycle_path: '@Recycle'
- name: backup
comment: Sicherungen User
path: /data/backup
browseable: !!str yes
read_only: !!str yes
writeable: !!str no
guest_ok: !!str no
file_create_mask: !!str 0664
dir_create_mask: !!str 0755
vfs_object_recycle: false
# ==============================
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.

3234
hosts

File diff suppressed because it is too large Load Diff

View File

@ -224,171 +224,9 @@ RequiredRSASize {{ sshd_required_rsa_size }}
# RequiredRSASize 1024
{% endif %}
{% endif %}
{% if (fact_sshd_pubkey_accepted_algorithms is defined) and fact_sshd_pubkey_accepted_algorithms %}
# PubkeyAcceptedAlgorithms
#
# Specifies the signature algorithms that will be accepted for public key authentication as a list of
# comma-separated patterns. Alternately if the specified list begins with a '+' character, then the spec
# ified algorithms will be appended to the default set instead of replacing them. If the specified list
# begins with a '-' character, then the specified algorithms (including wildcards) will be removed from
# the default set instead of replacing them. If the specified list begins with a '^' character, then the
# specified algorithms will be placed at the head of the default set. The default for this option is:
#
# ssh-ed25519-cert-v01@openssh.com,
# ecdsa-sha2-nistp256-cert-v01@openssh.com,
# ecdsa-sha2-nistp384-cert-v01@openssh.com,
# ecdsa-sha2-nistp521-cert-v01@openssh.com,
# sk-ssh-ed25519-cert-v01@openssh.com,
# sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,
# rsa-sha2-512-cert-v01@openssh.com,
# rsa-sha2-256-cert-v01@openssh.com,
# ssh-ed25519,
# ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,
# sk-ssh-ed25519@openssh.com,
# sk-ecdsa-sha2-nistp256@openssh.com,
# rsa-sha2-512,rsa-sha2-256
#
# The list of available signature algorithms may also be obtained using
# "ssh -Q PubkeyAcceptedAlgorithms"
#
PubkeyAcceptedAlgorithms {{ fact_sshd_pubkey_accepted_algorithms }}
{% endif %}
# KexAlgorithms
#
# Specifies the available KEX (Key Exchange) algorithms. Multiple algorithms must be comma-separated.
# Alternately if the specified value begins with a '+' character, then the specified methods will be ap
# pended to the default set instead of replacing them. If the specified value begins with a '-' charac
# ter, then the specified methods (including wildcards) will be removed from the default set instead of
# replacing them. The supported algorithms are:
#
# curve25519-sha256
# curve25519-sha256@libssh.org
# diffie-hellman-group1-sha1
# diffie-hellman-group14-sha1
# diffie-hellman-group14-sha256
# diffie-hellman-group16-sha512
# diffie-hellman-group18-sha512
# diffie-hellman-group-exchange-sha1
# diffie-hellman-group-exchange-sha256
# ecdh-sha2-nistp256
# ecdh-sha2-nistp384
# ecdh-sha2-nistp521
#
# The default is:
#
# sntrup761x25519-sha512@openssh.com,
# curve25519-sha256,curve25519-sha256@libssh.org,
# ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,
# diffie-hellman-group-exchange-sha256,
# diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,
# diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
#
# The list of available key exchange algorithms may also be obtained using "ssh -Q kex".
#
{% if (fact_sshd_kexalgorithms is defined) and fact_sshd_kexalgorithms %}
KexAlgorithms {{ fact_sshd_kexalgorithms }}
{% else %}
#KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
{% endif %}
# Ciphers
#
# Specifies the ciphers allowed. Multiple ciphers must be comma-separated. If the specified value begins
# with a '+' character, then the specified ciphers will be appended to the default set instead of replac
# ing them. If the specified value begins with a '-' character, then the specified ciphers (including
# wildcards) will be removed from the default set instead of replacing them.
#
# The supported ciphers are:
#
# 3des-cbc
# aes128-cbc
# aes192-cbc
# aes256-cbc
# aes128-ctr
# aes192-ctr
# aes256-ctr
# aes128-gcm@openssh.com
# aes256-gcm@openssh.com
# chacha20-poly1305@openssh.com
#
# The default is:
#
# chacha20-poly1305@openssh.com,
# aes128-ctr,aes192-ctr,aes256-ctr,
# aes128-gcm@openssh.com,aes256-gcm@openssh.com
#
# The list of available ciphers may also be obtained using "ssh -Q cipher".
#
{% if (fact_sshd_ciphers is defined) and fact_sshd_ciphers %}
Ciphers {{ fact_sshd_ciphers }}
{% else %}
#Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr
{% endif %}
# MACs
#
# Specifies the available MAC (message authentication code) algorithms. The MAC algorithm is used for
# data integrity protection. Multiple algorithms must be comma-separated. If the specified value begins
# with a '+' character, then the specified algorithms will be appended to the default set instead of re
# placing them. If the specified value begins with a '-' character, then the specified algorithms (in
# cluding wildcards) will be removed from the default set instead of replacing them.
#
# The algorithms that contain "-etm" calculate the MAC after encryption (encrypt-then-mac). These are
# considered safer and their use recommended. The supported MACs are:
#
# hmac-md5
# hmac-md5-96
# hmac-sha1
# hmac-sha1-96
# hmac-sha2-256
# hmac-sha2-512
# umac-64@openssh.com
# umac-128@openssh.com
# hmac-md5-etm@openssh.com
# hmac-md5-96-etm@openssh.com
# hmac-sha1-etm@openssh.com
# hmac-sha1-96-etm@openssh.com
# hmac-sha2-256-etm@openssh.com
# hmac-sha2-512-etm@openssh.com
# umac-64-etm@openssh.com
# umac-128-etm@openssh.com
#
# The default is:
#
# umac-64-etm@openssh.com,umac-128-etm@openssh.com,
# hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,
# hmac-sha1-etm@openssh.com,
# umac-64@openssh.com,umac-128@openssh.com,
# hmac-sha2-256,hmac-sha2-512,hmac-sha1
#
# The list of available MAC algorithms may also be obtained using "ssh -Q mac".
#
{% if (fact_sshd_macs is defined) and fact_sshd_macs %}
MACs {{ fact_sshd_macs }}
{% else %}
#MACs umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,mac-sha2-256,hmac-sha2-512,hmac-sha1
{% endif %}
# HostKeyAlgorithms
#
# Specifies the host key algorithms that the server offers. The default for this option is:
#
# ecdsa-sha2-nistp256-cert-v01@openssh.com,
# ecdsa-sha2-nistp384-cert-v01@openssh.com,
# ecdsa-sha2-nistp521-cert-v01@openssh.com,
# ssh-ed25519-cert-v01@openssh.com,
# rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,
# ssh-rsa-cert-v01@openssh.com,
# ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,
# ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
#
# The list of available key types may also be obtained using "ssh -Q key".
{% if (fact_sshd_hostkeyalgorithms is defined) and fact_sshd_hostkeyalgorithms %}
HostKeyAlgorithms {{ fact_sshd_hostkeyalgorithms }}
{% endif %}
# We use the distribution default values
# ======================================
#-----------------------------
# Logging