2025-06-10 21:05:04 +02:00
|
|
|
# OpenSSH server configuration (managed by Ansible)
|
|
|
|
Port {{ ssh_port }}
|
|
|
|
Protocol 2
|
|
|
|
PermitRootLogin no
|
|
|
|
PasswordAuthentication no
|
|
|
|
ChallengeResponseAuthentication no
|
|
|
|
UsePAM yes
|
|
|
|
X11Forwarding no
|
|
|
|
ClientAliveInterval 300
|
|
|
|
ClientAliveCountMax 2
|
|
|
|
LoginGraceTime 30
|
|
|
|
MaxAuthTries 3
|
|
|
|
AllowTcpForwarding no
|
|
|
|
PermitEmptyPasswords no
|
|
|
|
PrintMotd no
|
|
|
|
UseDNS no
|
2025-06-25 22:00:12 +02:00
|
|
|
Compression no
|
|
|
|
Subsystem sftp /usr/lib/openssh/sftp-server
|