Alan Orth b7c92e4dc1

roles/common: Remove 128-bit Ciphers and MACs from sshd_config ...

I had removed them from Debian 8 and Ubuntu 14.04 configs last year
when the NSA's Suite B crypto guidelines dropped 128-bit algorithms
but those changes didn't make it to my new Ubuntu 16.04 config.

It is probably overkill and paranoid, but this server is mine, so I
can make those decisions (and I only connect from modern clients).

2016-08-16 14:28:58 +03:00

..

etc/udev/rules.d

roles/common: Set I/O scheduler via udev

2015-03-15 17:52:05 +03:00

ip6tables.j2

Add IPv6 support to firewall tasks / template

2015-05-25 18:17:23 +03:00

iptables.j2

Initial commit

2014-08-17 00:35:57 +03:00

public.xml.j2

roles/common: Use "interface" instead of "alias" to get interface name in firewalld template

2015-08-23 12:06:47 +03:00

rc.local_Ubuntu.j2

roles/common: Remove I/O scheduler logic from rc.local

2015-03-15 17:40:54 +03:00

security.sources.list.j2

roles/common: Update sources for cron-apt

2016-05-05 12:16:37 +03:00

sources.list.j2

roles/common: Use httpredir.debian.org as default Debian mirror

2015-11-30 09:34:16 +02:00

sshd_config_Debian-8.j2

roles/common: Add a few SHA-2 MACs to sshd_config

2016-08-16 14:24:53 +03:00

sshd_config_Ubuntu-14.04.j2

roles/common: Add a few SHA-2 MACs to sshd_config

2016-08-16 14:24:53 +03:00

sshd_config_Ubuntu-15.04.j2

roles/common: Tweak sshd_config to match NSA Suite B recommendations

2015-09-02 16:55:51 +03:00

sshd_config_Ubuntu-16.04.j2

roles/common: Remove 128-bit Ciphers and MACs from sshd_config

2016-08-16 14:28:58 +03:00

sysctl_Debian.j2

roles/common: Add sysctl template for Debian hosts

2015-08-23 00:12:17 +03:00

sysctl_Ubuntu.j2

roles/common: Remove logic for TCP congestion avoidance on early kernels in sysctl

2015-03-15 17:25:33 +03:00