diff options
author | Patrick Spek <p.spek@tyil.nl> | 2023-06-28 23:38:09 +0200 |
---|---|---|
committer | Patrick Spek <p.spek@tyil.nl> | 2023-06-28 23:38:09 +0200 |
commit | 302f35b3b75b793d7a37cc30b5ca1364595d6fb8 (patch) | |
tree | 1257d36585301661d861fb8963558a5da6273e81 /playbooks.d/ssh/share/sshd_config.bpt | |
parent | 8289cfefb4d4cc1d14deb44d0ab9df77003baee3 (diff) |
Fix ssh playbook for use with satpl
Diffstat (limited to 'playbooks.d/ssh/share/sshd_config.bpt')
-rw-r--r-- | playbooks.d/ssh/share/sshd_config.bpt | 33 |
1 files changed, 0 insertions, 33 deletions
diff --git a/playbooks.d/ssh/share/sshd_config.bpt b/playbooks.d/ssh/share/sshd_config.bpt deleted file mode 100644 index f1976a5..0000000 --- a/playbooks.d/ssh/share/sshd_config.bpt +++ /dev/null @@ -1,33 +0,0 @@ -# Connectivity -Port 22 -AddressFamily any -ListenAddress 0.0.0.0 -ListenAddress :: - -# Fluff -PrintMotd yes - -# SFTP -Subsystem sftp {{sftp}} - -# Authentication -AuthorizedKeysFile /etc/ssh/authorized_keys .ssh/authorized_keys -ChallengeResponseAuthentication no -PasswordAuthentication no -PermitRootLogin no -PubkeyAuthentication no - -# Security -Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr -HostKeyAlgorithms ssh-ed25519 -KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org -MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com - -# Allow tyil -Match User tyil - PubkeyAuthentication yes - -# Allow public key authentication over VPN -Match Address 10.57.0.0/16 - PubkeyAuthentication yes - PermitRootLogin prohibit-password |