42 lines
837 B
Django/Jinja
42 lines
837 B
Django/Jinja
# {{ ansible_managed }}
|
|
# This file is managed by Ansible. Do not edit it manually.
|
|
# This is the ssh server system-wide configuration file.
|
|
# See sshd_config(5) for more information.
|
|
|
|
Port 22
|
|
AddressFamily any
|
|
ListenAddress 0.0.0.0
|
|
ListenAddress ::
|
|
|
|
# HostKeys
|
|
HostKey /etc/ssh/ssh_host_ed25519_key
|
|
HostKey /etc/ssh/ssh_host_rsa_key
|
|
|
|
# Authentication
|
|
PermitRootLogin no
|
|
PubkeyAuthentication yes
|
|
PasswordAuthentication no
|
|
PermitEmptyPasswords no
|
|
AuthenticationMethods publickey
|
|
MaxAuthTries 3
|
|
|
|
# SFTP
|
|
Subsystem sftp /usr/lib/openssh/sftp-server
|
|
|
|
# Security
|
|
X11Forwarding no
|
|
PermitTunnel no
|
|
AllowAgentForwarding no
|
|
AllowTcpForwarding yes
|
|
PermitOpen any
|
|
ClientAliveInterval 300
|
|
ClientAliveCountMax 2
|
|
Compression no
|
|
UseDNS no
|
|
|
|
# Logging
|
|
SyslogFacility AUTH
|
|
LogLevel VERBOSE
|
|
|
|
# Accept locale-related environment variables
|
|
AcceptEnv LANG LC_* |