mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-11-09 19:51:34 -05:00
25 lines
532 B
Plaintext
25 lines
532 B
Plaintext
# Encryption hardening
|
|
HostKey /etc/ssh/ssh_host_ed25519_key
|
|
HostKeyAlgorithms ssh-ed25519
|
|
KexAlgorithms sntrup761x25519-sha512@openssh.com
|
|
PubkeyAcceptedKeyTypes ssh-ed25519
|
|
Ciphers aes256-gcm@openssh.com
|
|
MACs -*
|
|
|
|
# Disabling unused authentication methods
|
|
PasswordAuthentication no
|
|
PermitRootLogin no
|
|
KerberosAuthentication no
|
|
GSSAPIAuthentication no
|
|
|
|
# Disabling unused features
|
|
AllowAgentForwarding no
|
|
AllowTcpForwarding no
|
|
PermitTunnel no
|
|
X11Forwarding no
|
|
|
|
# Displaying info
|
|
Banner /etc/issue.net
|
|
PrintLastLog yes
|
|
PrintMotd yes
|