Skip to content

Instantly share code, notes, and snippets.

@andrewgdunn
Created December 6, 2016 12:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save andrewgdunn/51b1fff2b9b25cbef54bc79a52ec9ae5 to your computer and use it in GitHub Desktop.
Save andrewgdunn/51b1fff2b9b25cbef54bc79a52ec9ae5 to your computer and use it in GitHub Desktop.
# from https://cipherli.st/ and https://wiki.mozilla.org/Security/Guidelines/OpenSSH
Port 4252
Protocol 2
HostKey /etc/ssh/ssh_host_ed25519_key
HostKey /etc/ssh/ssh_host_rsa_key
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,umac-128@openssh.com
AuthenticationMethods publickey
LogLevel VERBOSE
Subsystem sftp  /usr/lib/ssh/sftp-server -f AUTHPRIV -l INFO
PermitRootLogin No
UsePrivilegeSeparation sandbox
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment