infrastructure/templates/sshd_config.j2

30 lines
661 B
Plaintext
Raw Normal View History

2021-03-09 12:42:28 +00:00
Protocol 2
Port {{ ansible_port }}
ListenAddress {{ ansible_default_ipv4.address }}
2022-06-05 10:20:34 +00:00
{% if ansible_default_ipv6.address is defined %}
2021-03-09 12:42:28 +00:00
ListenAddress {{ ansible_default_ipv6.address }}
2022-06-05 10:20:34 +00:00
{% endif %}
2021-03-09 12:42:28 +00:00
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
PermitRootLogin without-password
StrictModes yes
MaxAuthTries 2
AllowUsers root
PubkeyAuthentication yes
AuthenticationMethods publickey
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no
PermitEmptyPasswords no
IgnoreRhosts yes
UsePAM yes
ChallengeResponseAuthentication no
PrintMotd no
X11Forwarding no
AllowTcpForwarding no
Subsystem sftp /usr/lib/openssh/sftp-server