mirror of
https://github.com/kellyjonbrazil/jc.git
synced 2026-04-07 17:57:03 +02:00
105 lines
4.0 KiB
Plaintext
105 lines
4.0 KiB
Plaintext
port 22
|
|
addressfamily any
|
|
listenaddress [::]:22
|
|
listenaddress 0.0.0.0:22
|
|
usepam yes
|
|
logingracetime 120
|
|
x11displayoffset 10
|
|
x11maxdisplays 1000
|
|
maxauthtries 6
|
|
maxsessions 10
|
|
clientaliveinterval 0
|
|
clientalivecountmax 3
|
|
streamlocalbindmask 0177
|
|
permitrootlogin yes
|
|
ignorerhosts yes
|
|
ignoreuserknownhosts no
|
|
hostbasedauthentication no
|
|
hostbasedusesnamefrompacketonly no
|
|
pubkeyauthentication yes
|
|
kerberosauthentication no
|
|
kerberosorlocalpasswd yes
|
|
kerberosticketcleanup yes
|
|
gssapiauthentication yes
|
|
gssapicleanupcredentials no
|
|
gssapikeyexchange no
|
|
gssapistrictacceptorcheck yes
|
|
gssapistorecredentialsonrekey no
|
|
gssapikexalgorithms gss-gex-sha1-,gss-group1-sha1-,gss-group14-sha1-
|
|
passwordauthentication yes
|
|
kbdinteractiveauthentication no
|
|
challengeresponseauthentication no
|
|
printmotd yes
|
|
printlastlog yes
|
|
x11forwarding yes
|
|
x11uselocalhost yes
|
|
permittty yes
|
|
permituserrc yes
|
|
strictmodes yes
|
|
tcpkeepalive yes
|
|
permitemptypasswords no
|
|
permituserenvironment no
|
|
compression yes
|
|
gatewayports no
|
|
showpatchlevel no
|
|
usedns yes
|
|
allowtcpforwarding yes
|
|
allowagentforwarding yes
|
|
disableforwarding no
|
|
allowstreamlocalforwarding yes
|
|
streamlocalbindunlink no
|
|
useprivilegeseparation sandbox
|
|
kerberosusekuserok yes
|
|
gssapienablek5users no
|
|
exposeauthenticationmethods never
|
|
fingerprinthash SHA256
|
|
pidfile /var/run/sshd.pid
|
|
xauthlocation /usr/bin/xauth
|
|
ciphers chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc
|
|
macs umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
|
|
banner none
|
|
forcecommand none
|
|
chrootdirectory none
|
|
trustedusercakeys none
|
|
revokedkeys none
|
|
authorizedprincipalsfile none
|
|
versionaddendum none
|
|
authorizedkeyscommand none
|
|
authorizedkeyscommanduser none
|
|
authorizedprincipalscommand none
|
|
authorizedprincipalscommanduser none
|
|
hostkeyagent none
|
|
kexalgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
|
|
hostbasedacceptedkeytypes ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
|
|
hostkeyalgorithms ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
|
|
pubkeyacceptedkeytypes ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
|
|
loglevel INFO
|
|
syslogfacility AUTHPRIV
|
|
authorizedkeysfile .ssh/authorized_keys
|
|
hostkey /etc/ssh/ssh_host_rsa_key
|
|
hostkey /etc/ssh/ssh_host_ecdsa_key
|
|
hostkey /etc/ssh/ssh_host_ed25519_key
|
|
acceptenv LANG
|
|
acceptenv LC_CTYPE
|
|
acceptenv LC_NUMERIC
|
|
acceptenv LC_TIME
|
|
acceptenv LC_COLLATE
|
|
acceptenv LC_MONETARY
|
|
acceptenv LC_MESSAGES
|
|
acceptenv LC_PAPER
|
|
acceptenv LC_NAME
|
|
acceptenv LC_ADDRESS
|
|
acceptenv LC_TELEPHONE
|
|
acceptenv LC_MEASUREMENT
|
|
acceptenv LC_IDENTIFICATION
|
|
acceptenv LC_ALL
|
|
acceptenv LANGUAGE
|
|
acceptenv XMODIFIERS
|
|
authenticationmethods any
|
|
subsystem sftp /usr/libexec/openssh/sftp-server
|
|
maxstartups 10:30:100
|
|
permittunnel no
|
|
ipqos lowdelay throughput
|
|
rekeylimit 0 0
|
|
permitopen any
|