Skip to content

Instantly share code, notes, and snippets.

@Mithrandir2k18
Mithrandir2k18 / hardened sshd_config
Last active March 24, 2020 10:43
Comments and suggestions for improvements much appreciated. Meant to be a ready to use on a modern machine for using SSH with PKA only, with secure defaults. If you are using this, make sure the user on the host is in the 'ssh-user' group!
# $OpenBSD: sshd_config,v 1.101 2017/03/14 07:19:07 djm Exp $
# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options override the