ansible-personal/roles/common
Alan Orth ebd8b0632b
roles/common: Disable unsafe Diffie-Hellman SSH moduli
The WeakDH team showed (in 2015) that Diffie-Hellman key exchange
with prime number groups of 1024 bits or less were weaker than we
previously thought, and well within the reach of nation states. They
recommended (in 2015) using 2048-bit or higher prime groups.

The SSH audit project recommends that we should use 3072-bit now.

See: https://weakdh.org/
See: https://github.com/jtesta/ssh-audit/
2021-10-10 16:57:05 +03:00
..
defaults roles/common: Fix fail2ban ignoreip 2021-08-12 15:24:50 +03:00
files roles/common: Update list of abusive IP addresses 2021-09-28 10:28:02 +03:00
handlers roles/common: notify fail2ban after updating firewall 2021-09-28 10:45:51 +03:00
tasks roles/common: Disable unsafe Diffie-Hellman SSH moduli 2021-10-10 16:57:05 +03:00
templates roles/common: use a range for mosh ports in nftables 2021-09-28 07:34:25 +03:00