Skip to content

Instantly share code, notes, and snippets.

@matyklug18
Created December 18, 2021 10:55
Show Gist options
  • Save matyklug18/314b3df0068de5b0dc2363fcce9c7e36 to your computer and use it in GitHub Desktop.
Save matyklug18/314b3df0068de5b0dc2363fcce9c7e36 to your computer and use it in GitHub Desktop.
UsePAM yes
Banner none
AddressFamily any
Port 22
XAuthLocation /nix/store/0ml27y8g7c50dhhcvv1s7lhzspxamk5q-xauth-1.1/bin/xauth
X11Forwarding yes
Subsystem sftp /nix/store/frjj7n3ygp3hdgljv8j9ryx8l4c76qf2-openssh-8.8p1/libexec/sftp-server
PermitRootLogin prohibit-password
GatewayPorts no
PasswordAuthentication no
ChallengeResponseAuthentication yes
PrintMotd no # handled by pam_motd
AuthorizedKeysFile %h/.ssh/authorized_keys %h/.ssh/authorized_keys2 /etc/ssh/authorized_keys.d/%u
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
LogLevel INFO
UseDNS no
Match User matyk
PasswordAuthentication yes
Match all
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment