ansible-personal/roles
Alan Orth ebd8b0632b
roles/common: Disable unsafe Diffie-Hellman SSH moduli
The WeakDH team showed (in 2015) that Diffie-Hellman key exchange
with prime number groups of 1024 bits or less were weaker than we
previously thought, and well within the reach of nation states. They
recommended (in 2015) using 2048-bit or higher prime groups.

The SSH audit project recommends that we should use 3072-bit now.

See: https://weakdh.org/
See: https://github.com/jtesta/ssh-audit/
2021-10-10 16:57:05 +03:00
..
common roles/common: Disable unsafe Diffie-Hellman SSH moduli 2021-10-10 16:57:05 +03:00
mariadb roles/mariadb: Change socket location 2021-09-08 15:50:48 +03:00
munin roles/munin: Remove tomcat config 2020-07-14 09:47:39 +03:00
nginx roles/nginx: minor rework of acme.sh tasks 2021-09-27 13:40:17 +03:00
php-fpm roles/php-fpm: Install php7.4-xml 2021-09-13 10:19:33 +03:00