|
|
|
|
|
|
|
|
sshd_config: |
|
|
sshd_config: |
|
|
|
|
|
# This keyword is totally optional |
|
|
|
|
|
ConfigBanner: | |
|
|
|
|
|
# Alternative banner for the config file |
|
|
|
|
|
# (Indented) hash signs lose their special meaning here |
|
|
|
|
|
# and the lines will be written as-is. |
|
|
Port: 22 |
|
|
Port: 22 |
|
|
Protocol: 2 |
|
|
Protocol: 2 |
|
|
HostKey: |
|
|
HostKey: |
|
|
|
|
|
|
|
|
AllowTcpForwarding: no |
|
|
AllowTcpForwarding: no |
|
|
ForceCommand: internal-sftp |
|
|
ForceCommand: internal-sftp |
|
|
# Check `man sshd_config` for supported KexAlgorithms, Ciphers and MACs first. |
|
|
# Check `man sshd_config` for supported KexAlgorithms, Ciphers and MACs first. |
|
|
KexAlgorithms: 'diffie-hellman-group14-sha1,diffie-hellman-group1-sha1' |
|
|
|
|
|
|
|
|
# For these three keywords, the options may be specified as a list... |
|
|
|
|
|
KexAlgorithms: |
|
|
|
|
|
- diffie-hellman-group14-sha1 |
|
|
|
|
|
- diffie-hellman-group1-sha1 |
|
|
|
|
|
# ... or a single string. |
|
|
Ciphers: 'aes128-ctr,aes256-ctr' |
|
|
Ciphers: 'aes128-ctr,aes256-ctr' |
|
|
MACs: 'hmac-sha1' |
|
|
MACs: 'hmac-sha1' |
|
|
|
|
|
# Similar situation for ssh_config |
|
|
|
|
|
|
|
|
ssh_config: |
|
|
ssh_config: |
|
|
StrictHostKeyChecking: no |
|
|
StrictHostKeyChecking: no |