ansible-personal/roles/common/tasks
Alan Orth ebd8b0632b
roles/common: Disable unsafe Diffie-Hellman SSH moduli
The WeakDH team showed (in 2015) that Diffie-Hellman key exchange
with prime number groups of 1024 bits or less were weaker than we
previously thought, and well within the reach of nation states. They
recommended (in 2015) using 2048-bit or higher prime groups.

The SSH audit project recommends that we should use 3072-bit now.

See: https://weakdh.org/
See: https://github.com/jtesta/ssh-audit/
2021-10-10 16:57:05 +03:00
..
cron-apt.yml Update with_items loops to use new-ish "loop" keyword 2018-04-02 15:52:51 +03:00
fail2ban.yml Add nginx filter for fail2ban 2021-08-01 09:56:43 +03:00
firewall_Debian.yml roles/common: notify fail2ban after updating firewall 2021-09-28 10:45:51 +03:00
firewall_Ubuntu.yml roles/common: notify fail2ban after updating firewall 2021-09-28 10:45:51 +03:00
main.yml roles/common: Update list of abusive IP addresses 2020-11-06 15:44:57 +02:00
ntp.yml roles/common: Don't update apt cache when removing packages 2021-09-08 17:05:48 +03:00
packages_Debian.yml roles/common: Install rsync and lsof 2021-09-27 11:36:40 +03:00
packages_Ubuntu.yml roles/common: Install rsync and lsof 2021-09-27 11:36:40 +03:00
ssh-keys.yml roles/common: Add functionality to copy user keys to provisioning user 2014-10-11 12:13:45 +03:00
sshd.yml roles/common: Disable unsafe Diffie-Hellman SSH moduli 2021-10-10 16:57:05 +03:00
tarsnap.yml roles/common: Update Tarsnap GPG key 2021-02-13 12:57:17 +02:00