---
galaxy_info:
  role_name: openssh_server
  namespace: welshwandering
  author: Gravitino LLC
  description: |
    Comprehensive OpenSSH server hardening for Debian, Ubuntu, and Rocky Linux systems with support for
    16 compliance frameworks (PCI DSS, HIPAA, FedRAMP, FISMA, SOC 2, GDPR, ISO 27001+),
    extensive CVE tracking, and version-aware capability detection across 17 distributions.

    Features:
    - Comprehensive security hardening with defense-in-depth
    - 20+ CVE mitigations with distribution-specific patch tracking
    - Post-quantum cryptography (ML-KEM) support
    - FIDO2/WebAuthn hardware security key authentication
    - Automatic version detection and capability flags
    - Mozilla Modern Profile + OpenSSH 10.0 cryptography preferences

  license: MIT
  min_ansible_version: "2.15"

  platforms:
    - name: Debian
      versions:
        - stretch
        - buster
        - bullseye
        - bookworm
        - trixie
    - name: Ubuntu
      versions:
        - xenial
        - bionic
        - focal
        - jammy
        - noble
    - name: EL
      versions:
        - "8"
        - "9"
        - "10"
    - name: Rocky
      versions:
        - "8.0"
        - "9.0"
        - "all"
    - name: Fedora
      versions:
        - "43"

  galaxy_tags:
    - security
    - ssh
    - openssh
    - hardening
    - compliance
    - pci-dss
    - hipaa
    - fedramp
    - fips
    - gdpr
    - sox
    - soc2
    - infrastructure
    - system
    - networking

dependencies: []