update..

group_vars/all/main.yml

@@ -134,7 +134,7 @@ apt_manage_sources_list: true
 apt_src_enable: true
 apt_backports_enable: true
 
-apt_debian_mirror: http://ftp.de.debian.org/debian/
+apt_debian_mirror: http://ftp2.de.debian.org/debian/
 apt_debian_contrib_nonfree_enable: true
 
 # Ubuntu mirror
@@ -2083,6 +2083,36 @@ sshd_use_dns: !!str "no"
 
 sshd_gateway_ports: !!str "no"
 
+
+# sshd_pubkey_accepted_algorithms:
+#
+# if the specified list begins with a '+' character, then the specified 
+# algorithms will be appended to the default set instead of replacing them.
+#
+# If the specified list begins with a '-' character, then the specified algorithms 
+# (including wildcards) will be removed from the default set instead of replacing them.
+#
+# If the specified list begins with a '^' character, then the
+# specified algorithms will be placed at the head of the default set.
+
+#sshd_pubkey_accepted_algorithms:
+#  - curve25519-sha256@libssh.org
+#  - diffie-hellman-group1-sha1
+#  - diffie-hellman-group14-sha1
+#  - diffie-hellman-group14-sha256
+#  - diffie-hellman-group16-sha512
+#  - diffie-hellman-group18-sha512
+#  - diffie-hellman-group-exchange-sha1
+#  - diffie-hellman-group-exchange-sha256
+#  - ecdh-sha2-nistp256
+#  - ecdh-sha2-nistp384
+#  - ecdh-sha2-nistp521
+ 
+#sshd_pubkey_accepted_algorithms: 
+#  - +ssh-rsa
+#  - ssh-dss
+
+
 # sshd_kexalgorithms
 #
 # Example:
@@ -2188,6 +2218,8 @@ sudoers_file_user_back_postgres_privileges:
 
 sudoers_file_user_back_svn_privileges: []
 
+sudoers_file_user_back_mount_privileges: []
+
 sudoers_file_user_back_disk_privileges:
   - 'ALL=(root) NOPASSWD: /usr/bin/which'
   - 'ALL=(root) NOPASSWD: /sbin/hdparm -I /dev/*'