diff options
| author | Patrick Spek <p.spek@tyil.nl> | 2023-04-04 00:52:57 +0200 |
|---|---|---|
| committer | Patrick Spek <p.spek@tyil.nl> | 2023-04-04 00:53:05 +0200 |
| commit | fb7cad99b08d76ffb942075b95fb31ee76492383 (patch) | |
| tree | a7288c080e17f0265898b591450c230186eb426d /playbooks.d/ssh/share/sshd_config.bpt | |
| parent | af9e4273fa91a96b3031dfa0d31e3b3bb023adfe (diff) | |
Update ssh playbook
Diffstat (limited to 'playbooks.d/ssh/share/sshd_config.bpt')
| -rw-r--r-- | playbooks.d/ssh/share/sshd_config.bpt | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/playbooks.d/ssh/share/sshd_config.bpt b/playbooks.d/ssh/share/sshd_config.bpt new file mode 100644 index 0000000..f1976a5 --- /dev/null +++ b/playbooks.d/ssh/share/sshd_config.bpt @@ -0,0 +1,33 @@ +# Connectivity +Port 22 +AddressFamily any +ListenAddress 0.0.0.0 +ListenAddress :: + +# Fluff +PrintMotd yes + +# SFTP +Subsystem sftp {{sftp}} + +# Authentication +AuthorizedKeysFile /etc/ssh/authorized_keys .ssh/authorized_keys +ChallengeResponseAuthentication no +PasswordAuthentication no +PermitRootLogin no +PubkeyAuthentication no + +# Security +Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr +HostKeyAlgorithms ssh-ed25519 +KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org +MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com + +# Allow tyil +Match User tyil + PubkeyAuthentication yes + +# Allow public key authentication over VPN +Match Address 10.57.0.0/16 + PubkeyAuthentication yes + PermitRootLogin prohibit-password |