Introducing perfect forward secrecy for SSH

diff --git a/manifests/nodo.pp b/manifests/nodo.pp
index f7741a43fd57fbf7066c953c9070b74bbb285924..7b8041d3b08969876eafa4cd21db0c6c7e2c7962 100644 (file)
--- a/manifests/nodo.pp
+++ b/manifests/nodo.pp
@@ -42,6 +42,7 @@ class nodo {
   $sshd_password_authentication = "yes"
   $sshd_shared_ip               = "yes"
   $sshd_tcp_forwarding          = "yes"
+  $sshd_perfect_forward_secrecy = "yes"
 
   file { "/etc/hostname":
     owner   => "root",