diff options
| author | root@culturestrings <root@culturestrings> | 2020-05-18 08:20:49 +0000 |
|---|---|---|
| committer | root@culturestrings <root@culturestrings> | 2020-05-18 08:20:49 +0000 |
| commit | 306ed11aedd8c760e21d42f693151ddb89cf24be (patch) | |
| tree | a8742d3347761ad4e0ab3195549a6ab6c438e6f0 | |
| parent | 16a71a0628417b1b1eda564a88eb98b53a2db3cb (diff) | |
| download | culturestrings-306ed11aedd8c760e21d42f693151ddb89cf24be.tar.bz2 culturestrings-306ed11aedd8c760e21d42f693151ddb89cf24be.tar.xz | |
sshd: added current configuration.
| -rwxr-xr-x | public/fs/etc/ssh/sshd-config.sh | 7 | ||||
| -rw-r--r-- | public/fs/etc/ssh/sshd_config.in | 42 |
2 files changed, 49 insertions, 0 deletions
diff --git a/public/fs/etc/ssh/sshd-config.sh b/public/fs/etc/ssh/sshd-config.sh new file mode 100755 index 0000000..7661108 --- /dev/null +++ b/public/fs/etc/ssh/sshd-config.sh @@ -0,0 +1,7 @@ +#!/bin/sh + +set -eu + +source /root/config/private/fs/etc/server.ports + +sed -e 's/@ssh_port@/'${ssh_port}'/g' "$1" diff --git a/public/fs/etc/ssh/sshd_config.in b/public/fs/etc/ssh/sshd_config.in new file mode 100644 index 0000000..e50456b --- /dev/null +++ b/public/fs/etc/ssh/sshd_config.in @@ -0,0 +1,42 @@ + +Port @ssh_port@ +AddressFamily any +ListenAddress 0.0.0.0 +ListenAddress :: + +HostKey /etc/ssh/ssh_host_ed25519_key +HostKey /etc/ssh/ssh_host_rsa_key + +SyslogFacility AUTH +LogLevel VERBOSE + +LoginGraceTime 2m +StrictModes yes +MaxAuthTries 6 +MaxSessions 256 + +UsePAM yes +PubkeyAuthentication yes +PermitRootLogin without-password + +PasswordAuthentication no +PermitEmptyPasswords no +ChallengeResponseAuthentication no + +AuthorizedKeysFile .ssh/authorized_keys +AuthorizedPrincipalsFile none + +AuthorizedKeysCommand none +AuthorizedKeysCommandUser nobody + + +AllowTcpForwarding yes +AllowAgentForwarding no +GatewayPorts no +X11Forwarding no + +Subsystem sftp /usr/lib/ssh/sftp-server + +AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES +AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT +AcceptEnv LC_IDENTIFICATION LC_ALL |