FEATURE: hardened ssh client config added, task pushing it added

roles/0_basic_postinstall/files/hardened_ssh.conf

@@ -0,0 +1,4 @@
+ Host *
+    HashKnownHosts yes
+    GSSAPIAuthentication yes
+    KexAlgorithms mlkem768x25519-sha256,sntrup761x25519-sha512,curve25519-sha256

roles/0_basic_postinstall/tasks/harden_ssh.yaml

@@ -8,8 +8,8 @@
   notify: restart sshd
 
 
-#- name: Configure ssh client
+- name: Configure ssh client
-#  copy:
+  copy:
-#    src: /home/max/ansible_files/ssh_config
+    src: ../files/hardened_ssh.conf
-#    dest: /etc/ssh/ssh_config
+    dest: /etc/ssh/ssh_config.d/hardened_ssh.conf
-#    mode: u=rw,g=r,o=r
+    mode: u=rw,g=r,o=r