69 lines
1.5 KiB
YAML
69 lines
1.5 KiB
YAML
---
|
|
galaxy_info:
|
|
role_name: openssh_server
|
|
namespace: welshwandering
|
|
author: Gravitino LLC
|
|
description: |
|
|
Comprehensive OpenSSH server hardening for Debian, Ubuntu, and Rocky Linux systems with support for
|
|
16 compliance frameworks (PCI DSS, HIPAA, FedRAMP, FISMA, SOC 2, GDPR, ISO 27001+),
|
|
extensive CVE tracking, and version-aware capability detection across 17 distributions.
|
|
|
|
Features:
|
|
- Comprehensive security hardening with defense-in-depth
|
|
- 20+ CVE mitigations with distribution-specific patch tracking
|
|
- Post-quantum cryptography (ML-KEM) support
|
|
- FIDO2/WebAuthn hardware security key authentication
|
|
- Automatic version detection and capability flags
|
|
- Mozilla Modern Profile + OpenSSH 10.0 cryptography preferences
|
|
|
|
license: MIT
|
|
min_ansible_version: "2.15"
|
|
|
|
platforms:
|
|
- name: Debian
|
|
versions:
|
|
- stretch
|
|
- buster
|
|
- bullseye
|
|
- bookworm
|
|
- trixie
|
|
- name: Ubuntu
|
|
versions:
|
|
- xenial
|
|
- bionic
|
|
- focal
|
|
- jammy
|
|
- noble
|
|
- name: EL
|
|
versions:
|
|
- "8"
|
|
- "9"
|
|
- "10"
|
|
- name: Rocky
|
|
versions:
|
|
- "8"
|
|
- "9"
|
|
- "10"
|
|
- name: Fedora
|
|
versions:
|
|
- "43"
|
|
|
|
galaxy_tags:
|
|
- security
|
|
- ssh
|
|
- openssh
|
|
- hardening
|
|
- compliance
|
|
- pci-dss
|
|
- hipaa
|
|
- fedramp
|
|
- fips
|
|
- gdpr
|
|
- sox
|
|
- soc2
|
|
- infrastructure
|
|
- system
|
|
- networking
|
|
|
|
dependencies: []
|