ansible-personal/roles/common/tasks
Alan Orth ebd8b0632b
roles/common: Disable unsafe Diffie-Hellman SSH moduli
The WeakDH team showed (in 2015) that Diffie-Hellman key exchange
with prime number groups of 1024 bits or less were weaker than we
previously thought, and well within the reach of nation states. They
recommended (in 2015) using 2048-bit or higher prime groups.

The SSH audit project recommends that we should use 3072-bit now.

See: https://weakdh.org/
See: https://github.com/jtesta/ssh-audit/
2021-10-10 16:57:05 +03:00
..
cron-apt.yml
fail2ban.yml Add nginx filter for fail2ban 2021-08-01 09:56:43 +03:00
firewall_Debian.yml roles/common: notify fail2ban after updating firewall 2021-09-28 10:45:51 +03:00
firewall_Ubuntu.yml roles/common: notify fail2ban after updating firewall 2021-09-28 10:45:51 +03:00
main.yml
ntp.yml roles/common: Don't update apt cache when removing packages 2021-09-08 17:05:48 +03:00
packages_Debian.yml roles/common: Install rsync and lsof 2021-09-27 11:36:40 +03:00
packages_Ubuntu.yml roles/common: Install rsync and lsof 2021-09-27 11:36:40 +03:00
ssh-keys.yml
sshd.yml roles/common: Disable unsafe Diffie-Hellman SSH moduli 2021-10-10 16:57:05 +03:00
tarsnap.yml