diff options
Diffstat (limited to 'roles/ssh/README.md')
| -rw-r--r-- | roles/ssh/README.md | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/roles/ssh/README.md b/roles/ssh/README.md index 7786808a..f61da5cf 100644 --- a/roles/ssh/README.md +++ b/roles/ssh/README.md @@ -6,11 +6,14 @@ This role configure the ssh functionality of a linux distro with hardening - `username` the user account to be added to the ssh allowed users. - `ssh_port` the port number to be enabled for ssh (default: 2222) +- `ssh_private_key` pre-generated Ed25519 host private key, unique per host. Generate with: + `ssh-keygen -t ed25519 -f host_key -C '' -N ''` +- `ssh_public_key` matching pre-generated Ed25519 host public key ## Internals - ensure that ssh packages is installed and enabled -- configure ssh host keys +- deploy pre-generated ssh host keys (stable across reprovision/reimage, no key regeneration on each setup) - configure ssh defaults - disable keyboard interactive authentication - disable PAM authentication |