Last active
April 13, 2020 13:42
-
-
Save klausbrunner/8a01949d44cc6ceb07ec1c6e4fbf413e to your computer and use it in GitHub Desktop.
Minimal, secure sshd_config (OpenSSH 8.2)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This is the sshd server system-wide configuration file. See | |
| # sshd_config(5) for more information. | |
| HostKey /etc/ssh/ssh_host_ed25519_key | |
| HostKey /etc/ssh/ssh_host_rsa_key | |
| ChallengeResponseAuthentication no | |
| UsePAM yes | |
| # Allow client to pass locale environment variables | |
| AcceptEnv LANG LC_* | |
| Subsystem sftp /usr/lib/openssh/sftp-server | |
| KexAlgorithms curve25519-sha256@libssh.org,curve25519-sha256,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group18-sha512 | |
| Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr | |
| MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com | |
| HostKeyAlgorithms ssh-ed25519,rsa-sha2-512,rsa-sha2-256 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment