From d280859b0d26eda163e56b6032d14dd4c3820a74 Mon Sep 17 00:00:00 2001 From: Alan Orth Date: Wed, 9 Aug 2023 21:55:04 +0200 Subject: [PATCH] roles/common: minor updates to Debian 11 sshd_config --- roles/common/templates/sshd_config_Debian-11.j2 | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/roles/common/templates/sshd_config_Debian-11.j2 b/roles/common/templates/sshd_config_Debian-11.j2 index 81153ab..df0aabb 100644 --- a/roles/common/templates/sshd_config_Debian-11.j2 +++ b/roles/common/templates/sshd_config_Debian-11.j2 @@ -131,8 +131,7 @@ Subsystem sftp /usr/lib/openssh/sftp-server # See: https://en.wikipedia.org/wiki/Commercial_National_Security_Algorithm_Suite Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com -KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 -Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr +KexAlgorithms curve25519-sha256, curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256 {% if ssh_allowed_users is defined and ssh_allowed_users %} # Is there a list of allowed users?