2019-07-17 13:02:32 +00:00
|
|
|
openssh-server
|
|
|
|
==============
|
|
|
|
|
|
|
|
::
|
|
|
|
|
|
|
|
LogLevel INFO
|
|
|
|
StrictModes yes
|
|
|
|
Subsystem sftp internal-sftp
|
|
|
|
|
|
|
|
AllowTcpForwarding yes
|
2019-08-12 07:07:17 +00:00
|
|
|
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com
|
2019-07-17 13:02:32 +00:00
|
|
|
Compression no
|
|
|
|
MaxStartups 10:30:50
|
|
|
|
PermitTunnel no
|
|
|
|
Port 22
|
|
|
|
TCPKeepAlive yes
|
|
|
|
ClientAliveInterval 30
|
|
|
|
X11Forwarding no
|
|
|
|
|
|
|
|
AuthorizedKeysFile .ssh/authorized_keys
|
|
|
|
ChallengeResponseAuthentication no
|
|
|
|
FingerprintHash sha256
|
|
|
|
HostbasedAuthentication no
|
|
|
|
IgnoreRhosts yes
|
2019-08-12 07:07:17 +00:00
|
|
|
HostKey /etc/ssh/ssh_host_ed25519_key
|
|
|
|
HostKeyAlgorithms ssh-ed25519
|
|
|
|
KexAlgorithms curve25519-sha256@libssh.org
|
2019-07-17 13:02:32 +00:00
|
|
|
LoginGraceTime 60
|
|
|
|
MACs hmac-sha2-512-etm@openssh.com
|
|
|
|
PasswordAuthentication no
|
|
|
|
PermitEmptyPasswords no
|
2019-07-17 18:13:56 +00:00
|
|
|
PermitRootLogin prohibit-password
|
2019-07-17 13:02:32 +00:00
|
|
|
PubkeyAuthentication yes
|
|
|
|
UseDNS no
|
|
|
|
UsePAM yes
|
|
|
|
|
|
|
|
DebianBanner no
|
|
|
|
PrintLastLog yes
|
|
|
|
PrintMotd yes
|
|
|
|
Banner none
|
|
|
|
VersionAddendum none
|