sovereign/roles/common/templates/etc_ssh_ssh_config.j2

# Github needs diffie-hellman-group-exchange-sha1 some of the time but not always.
Host github.com
    KexAlgorithms {{ kex_algorithms }},diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1

Host *
    Ciphers {{ ciphers }}
    KexAlgorithms {{ kex_algorithms }}
    SendEnv LANG LC_*
    HashKnownHosts yes
    GSSAPIAuthentication yes
    GSSAPIDelegateCredentials no
    MACs {{ macs }}
    PasswordAuthentication no
    UseRoaming no