mirror of
https://bitbucket.org/atlassian/dc-deployments-automation.git
synced 2025-12-13 00:13:09 -06:00
21 lines
663 B
YAML
21 lines
663 B
YAML
---
|
|
|
|
- name: Install Amazon-Linux-specific support packages
|
|
yum:
|
|
name:
|
|
- dejavu-sans-fonts
|
|
- file
|
|
- git-{{ git_version }}
|
|
- libxml2
|
|
- shadow-utils
|
|
|
|
- name: Limit the SSH ciphers
|
|
lineinfile:
|
|
path: "/etc/ssh/sshd_config"
|
|
# Drop insecure ciphers, currently 3des-cbc only. You can get the
|
|
# full list with `sshd -T | grep -i ciphers`
|
|
regexp: '^[Cc]iphers'
|
|
line: "Ciphers chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc"
|
|
insertbefore: "BOF"
|
|
ignore_errors: yes # No sshd == no problem
|