Provide granular noop for shh configuration

dev-sec / ansible-collection-hardening

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

http://dev-sec.io/

Apache License 2.0

3.94k stars 723 forks source link

Provide granular noop for shh configuration #789

Open seven-beep opened 1 week ago

seven-beep commented 1 week ago

Hello,

We would like to have more fine grained options on applying or not specific configurations.

This commit let the user choose to noop some configuration by setting their value to false.

Another option would have been to create more variables but I was reticent to do so.

Motivation for theses options are we may configure ourselves some (ssh host key regeneration in a templating system) or we are not ready for others (ssh_kex will break dist-upgrades, letting the operator without ssh).

seven-beep commented 1 week ago

The pgp signing should be ok now.

seven-beep commented 1 week ago

Well I guess it is more valid to use new variables to implement this behavior.

seven-beep commented 2 days ago

I corrected a few mispellings that was caught by codespell.