Skip to content

Instantly share code, notes, and snippets.

@maqp
Created January 15, 2020 18:14
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save maqp/6b2c430343d79e06e4f55b49d7e74927 to your computer and use it in GitHub Desktop.
Save maqp/6b2c430343d79e06e4f55b49d7e74927 to your computer and use it in GitHub Desktop.
sshd_config
# Server authentication
Protocol 2
HostKey /etc/ssh/ssh_host_ed25519_key
# Client authentication (Public key of client goes to ~/.ssh/authorized_keys)
PermitEmptyPasswords no
PasswordAuthentication yes
ChallengeResponseAuthentication no
PubkeyAuthentication yes
# Key exchange
KexAlgorithms curve25519-sha256@libssh.org
# Symmetric ciphers
Ciphers chacha20-poly1305@openssh.com
# Message Authentication Codes
MACs hmac-sha2-512-etm@openssh.com
# Misc
Port 22
SyslogFacility AUTH
LogLevel INFO
LoginGraceTime 120
PermitRootLogin no
StrictModes yes
IgnoreRhosts yes
HostbasedAuthentication no
IgnoreUserKnownHosts yes
X11Forwarding no
X11DisplayOffset 10
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
ChallengeResponseAuthentication no
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment