From 43d0d0a6a6e52f8af6805d0ab586d25ca4cf5586 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Thu, 16 Dec 2010 20:21:29 -0200
Subject: Introducing perfect forward secrecy for SSH

---
 manifests/nodo.pp | 1 +
 1 file changed, 1 insertion(+)

(limited to 'manifests/nodo.pp')

diff --git a/manifests/nodo.pp b/manifests/nodo.pp
index f7741a4..7b8041d 100644
--- a/manifests/nodo.pp
+++ b/manifests/nodo.pp
@@ -42,6 +42,7 @@ class nodo {
   $sshd_password_authentication = "yes"
   $sshd_shared_ip               = "yes"
   $sshd_tcp_forwarding          = "yes"
+  $sshd_perfect_forward_secrecy = "yes"
 
   file { "/etc/hostname":
     owner   => "root",
-- 
cgit v1.2.3