DEV-432: ansible stuff to change ssh ciphers on serverside + added new ssh key for fgoerz

4 years ago · f4c97a9a04
parent 819a658e50
commit f4c97a9a04
3 changed files with 12 additions and 1 deletions
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@ -268,3 +268,13 @@
    state: present
  tags:
    - config
 - name: "configure ssh_hardening"
  include_role:
    # include role from collection called 'devsec'
    name: devsec.hardening.ssh_hardening
    apply:
      tags:
        - ssh_hardening
  tags:
    - ssh_hardening
--- a/users/friedrich.goerz/ssh.pub
+++ b/users/friedrich.goerz/ssh.pub
@ -1 +1 @@
-ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFRlmqgkIJxBC45cbVX25P1Uam/+Ct7XFvgMm60TDOWkQiTuVp5vd1sHq2HCRRfGxPrsKmwSQS5wMYIjeiclTag= friedrich.goerz@netgo.de
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYq47r8Bm7W4fhh/hsj63iPxcoIii2TD9+0RLNOPF1g friedrich@friedrich-HP-ZBook
--- a/users/outdated/friedrich.goerz.2022.04.13.pub
+++ b/users/outdated/friedrich.goerz.2022.04.13.pub
@ -0,0 +1 @@
 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFRlmqgkIJxBC45cbVX25P1Uam/+Ct7XFvgMm60TDOWkQiTuVp5vd1sHq2HCRRfGxPrsKmwSQS5wMYIjeiclTag= friedrich.goerz@netgo.de
`@ -1 +1 @@`
	`ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFRlmqgkIJxBC45cbVX25P1Uam/+Ct7XFvgMm60TDOWkQiTuVp5vd1sHq2HCRRfGxPrsKmwSQS5wMYIjeiclTag= friedrich.goerz@netgo.de`	`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYq47r8Bm7W4fhh/hsj63iPxcoIii2TD9+0RLNOPF1g friedrich@friedrich-HP-ZBook`
		`@ -0,0 +1 @@`
							`ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFRlmqgkIJxBC45cbVX25P1Uam/+Ct7XFvgMm60TDOWkQiTuVp5vd1sHq2HCRRfGxPrsKmwSQS5wMYIjeiclTag= friedrich.goerz@netgo.de`