Thunix
/
ansible
mirror of https://github.com/ThunixdotNet/ansible.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update roles/common/files/sshd_config

This commit is contained in:
deepend 2024-01-01 02:57:34 +00:00
parent d1e624fa8d
commit 3fc5520768
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
roles/common/files/sshd_config
View File

@ -1,4 +1,4 @@
# $OpenBSD: sshd_config,v 1.100 2016/08/15 12:32:04 naddy Exp $ # $OpenBSD: sshd_config,v 1.100 2016/08/15 12:32:04 naddy Exp $
# This is the sshd server system-wide configuration file. See # This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information. # sshd_config(5) for more information.
@ -24,7 +24,7 @@ Port 2222
#RekeyLimit default none #RekeyLimit default none
# Logging # Logging
#SyslogFacility AUTH SyslogFacility AUTHPRIV
#LogLevel INFO #LogLevel INFO
# Authentication: # Authentication:
@ -38,7 +38,7 @@ PermitRootLogin without-password
PubkeyAuthentication yes PubkeyAuthentication yes
# Expect .ssh/authorized_keys2 to be disregarded by default in future. # Expect .ssh/authorized_keys2 to be disregarded by default in future.
#AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2 AuthorizedKeysFile .ssh/authorized_keys
#AuthorizedPrincipalsFile none #AuthorizedPrincipalsFile none
@ -55,6 +55,7 @@ PubkeyAuthentication yes
# To disable tunneled clear text passwords, change to no here! # To disable tunneled clear text passwords, change to no here!
#PermitEmptyPasswords no #PermitEmptyPasswords no
PasswordAuthentication no
# Change to yes to enable challenge-response passwords (beware issues with # Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads) # some PAM modules and threads)
@ -67,8 +68,8 @@ ChallengeResponseAuthentication yes
#KerberosGetAFSToken no #KerberosGetAFSToken no
# GSSAPI options # GSSAPI options
#GSSAPIAuthentication no GSSAPIAuthentication yes
#GSSAPICleanupCredentials yes GSSAPICleanupCredentials no
#GSSAPIStrictAcceptorCheck yes #GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no #GSSAPIKeyExchange no
@ -88,7 +89,7 @@ UsePAM yes
#AllowAgentForwarding yes #AllowAgentForwarding yes
AllowTcpForwarding yes AllowTcpForwarding yes
#GatewayPorts no #GatewayPorts no
X11Forwarding no X11Forwarding no
#X11DisplayOffset 10 #X11DisplayOffset 10
#X11UseLocalhost yes #X11UseLocalhost yes
#PermitTTY yes #PermitTTY yes
@ -97,7 +98,7 @@ PrintMotd no
#TCPKeepAlive yes #TCPKeepAlive yes
#UseLogin no #UseLogin no
#UsePrivilegeSeparation sandbox #UsePrivilegeSeparation sandbox
#PermitUserEnvironment no PermitUserEnvironment yes
#Compression delayed #Compression delayed
#ClientAliveInterval 0 #ClientAliveInterval 0
#ClientAliveCountMax 3 #ClientAliveCountMax 3
@ -115,14 +116,13 @@ PrintMotd no
AcceptEnv LANG LC_* AcceptEnv LANG LC_*
# override default of no subsystems # override default of no subsystems
Subsystem sftp /usr/lib/openssh/sftp-server Subsystem sftp /usr/lib/openssh/sftp-server
# Example of overriding settings on a per-user basis # Example of overriding settings on a per-user basis
#Match User anoncvs #Match User anoncvs
# X11Forwarding no # X11Forwarding no
# AllowTcpForwarding no # AllowTcpForwarding no
# PermitTTY no # PermitTTY no
# ForceCommand cvs server # ForceCommand cvs server
ClientAliveInterval 120 ClientAliveInterval 120
PasswordAuthentication no