Skip to content

Commit

Permalink
update readme on ssh ports and listen_to. fix #62
Browse files Browse the repository at this point in the history
  • Loading branch information
Sebastian Gumprich committed Apr 1, 2016
1 parent 39e0aa4 commit 3aee3fd
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,8 +20,9 @@ This role provides secure ssh-client and ssh-server configurations.
* ``ssh_server_weak_hmac`` - true if weaker HMAC mechanisms are required. This is usually only necessary, if older M2M mechanism need to communicate with SSH, that don't have any of the configured secure HMACs enabled.
* ``ssh_client_weak_kex`` - true if weaker Key-Exchange (KEX) mechanisms are required. This is usually only necessary, if older M2M mechanism need to communicate with SSH, that don't have any of the configured secure KEXs enabled.
* ``ssh_server_weak_kex`` - true if weaker Key-Exchange (KEX) mechanisms are required. This is usually only necessary, if older M2M mechanism need to communicate with SSH, that don't have any of the configured secure KEXs enabled.
* ``ssh_ports: ['22']`` - ports to which ssh-server should listen to and ssh-client should connect to
* ``ssh_listen_to: ['0.0.0.0']`` - one or more ip addresses, to which ssh-server should listen to. Default is empty, but should be configured for security reasons!
* ``ssh_server_ports: ['22']`` - ports to which ssh-server should listen to
* ``ssh_client_ports: ['22']`` - ports to which ssh-client should connect to
* ``ssh_listen_to: ['0.0.0.0']`` - one or more ip addresses, to which ssh-server should listen to. Default is all adresseses, but should be configured to specific addresses for security reasons!
* ``ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_dsa_key', '/etc/ssh/ssh_host_ecdsa_key']`` - Host keys to look for when starting sshd.
* ``ssh_client_alive_interval: 600``
* ``ssh_client_alive_count: 3``
Expand Down

0 comments on commit 3aee3fd

Please sign in to comment.