blob: 1af7b594ccb263d9a4806c0e021134ebd65cc852 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
# SSH Server Configuration for Git Server
# Security-hardened configuration for git-only access
# Runs as non-root user (git) with privilege separation disabled
# Network
Port 22
AddressFamily any
ListenAddress 0.0.0.0
# Host Keys
HostKey /etc/ssh/ssh_host_ed25519_key
HostKey /etc/ssh/ssh_host_rsa_key
# Security
PermitRootLogin no
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
# Restrict to git user only
AllowUsers git
# Disable tunneling and forwarding
X11Forwarding no
AllowTcpForwarding no
AllowAgentForwarding no
PermitTunnel no
# Logging
SyslogFacility AUTH
LogLevel INFO
# Performance
UseDNS no
# PID file location (writable by non-root)
PidFile /tmp/sshd.pid
|
