sshd_config 898 B

123456789101112131415161718192021222324252627282930313233343536
  1. LogLevel INFO
  2. #LogLevel DEBUG
  3. PidFile none
  4. Protocol 2
  5. Port 2222
  6. HostKey /etc/ssh/host_keys/rsa
  7. # https://cipherli.st/
  8. KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
  9. Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
  10. MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
  11. AllowUsers dump
  12. AuthenticationMethods publickey
  13. PubkeyAuthentication yes
  14. PasswordAuthentication no
  15. ChallengeResponseAuthentication no
  16. # dont check file permissions
  17. StrictModes no
  18. AllowAgentForwarding no
  19. AllowStreamLocalForwarding no
  20. AllowTcpForwarding no
  21. DisableForwarding yes
  22. GatewayPorts no
  23. PermitTTY no
  24. PermitTunnel no
  25. PermitUserEnvironment no
  26. PrintMotd no
  27. X11Forwarding no
  28. # sshd invokes shell set in /etc/passwd
  29. ForceCommand exit 1