Skip to content
This repository was archived by the owner on Dec 26, 2020. It is now read-only.

Commit 3aee3fd

Browse files
author
Sebastian Gumprich
committed
update readme on ssh ports and listen_to. fix #62
1 parent 39e0aa4 commit 3aee3fd

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

README.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,8 +20,9 @@ This role provides secure ssh-client and ssh-server configurations.
2020
* ``ssh_server_weak_hmac`` - true if weaker HMAC mechanisms are required. This is usually only necessary, if older M2M mechanism need to communicate with SSH, that don't have any of the configured secure HMACs enabled.
2121
* ``ssh_client_weak_kex`` - true if weaker Key-Exchange (KEX) mechanisms are required. This is usually only necessary, if older M2M mechanism need to communicate with SSH, that don't have any of the configured secure KEXs enabled.
2222
* ``ssh_server_weak_kex`` - true if weaker Key-Exchange (KEX) mechanisms are required. This is usually only necessary, if older M2M mechanism need to communicate with SSH, that don't have any of the configured secure KEXs enabled.
23-
* ``ssh_ports: ['22']`` - ports to which ssh-server should listen to and ssh-client should connect to
24-
* ``ssh_listen_to: ['0.0.0.0']`` - one or more ip addresses, to which ssh-server should listen to. Default is empty, but should be configured for security reasons!
23+
* ``ssh_server_ports: ['22']`` - ports to which ssh-server should listen to
24+
* ``ssh_client_ports: ['22']`` - ports to which ssh-client should connect to
25+
* ``ssh_listen_to: ['0.0.0.0']`` - one or more ip addresses, to which ssh-server should listen to. Default is all adresseses, but should be configured to specific addresses for security reasons!
2526
* ``ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_dsa_key', '/etc/ssh/ssh_host_ecdsa_key']`` - Host keys to look for when starting sshd.
2627
* ``ssh_client_alive_interval: 600``
2728
* ``ssh_client_alive_count: 3``

0 commit comments

Comments
 (0)