summaryrefslogtreecommitdiff
path: root/playbooks.d/ssh/share/sshd_config.bpt
diff options
context:
space:
mode:
authorPatrick Spek <p.spek@tyil.nl>2023-06-28 23:38:09 +0200
committerPatrick Spek <p.spek@tyil.nl>2023-06-28 23:38:09 +0200
commit302f35b3b75b793d7a37cc30b5ca1364595d6fb8 (patch)
tree1257d36585301661d861fb8963558a5da6273e81 /playbooks.d/ssh/share/sshd_config.bpt
parent8289cfefb4d4cc1d14deb44d0ab9df77003baee3 (diff)
Fix ssh playbook for use with satpl
Diffstat (limited to 'playbooks.d/ssh/share/sshd_config.bpt')
-rw-r--r--playbooks.d/ssh/share/sshd_config.bpt33
1 files changed, 0 insertions, 33 deletions
diff --git a/playbooks.d/ssh/share/sshd_config.bpt b/playbooks.d/ssh/share/sshd_config.bpt
deleted file mode 100644
index f1976a5..0000000
--- a/playbooks.d/ssh/share/sshd_config.bpt
+++ /dev/null
@@ -1,33 +0,0 @@
-# Connectivity
-Port 22
-AddressFamily any
-ListenAddress 0.0.0.0
-ListenAddress ::
-
-# Fluff
-PrintMotd yes
-
-# SFTP
-Subsystem sftp {{sftp}}
-
-# Authentication
-AuthorizedKeysFile /etc/ssh/authorized_keys .ssh/authorized_keys
-ChallengeResponseAuthentication no
-PasswordAuthentication no
-PermitRootLogin no
-PubkeyAuthentication no
-
-# Security
-Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
-HostKeyAlgorithms ssh-ed25519
-KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org
-MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com
-
-# Allow tyil
-Match User tyil
- PubkeyAuthentication yes
-
-# Allow public key authentication over VPN
-Match Address 10.57.0.0/16
- PubkeyAuthentication yes
- PermitRootLogin prohibit-password