Saltstack Official OpenSSH Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

60 lines
1.4KB

  1. sshd_config:
  2. Port: 22
  3. Protocol: 2
  4. HostKey:
  5. - /etc/ssh/ssh_host_rsa_key
  6. - /etc/ssh/ssh_host_dsa_key
  7. - /etc/ssh/ssh_host_ecdsa_key
  8. UsePrivilegeSeparation: 'yes'
  9. KeyRegenerationInterval: 3600
  10. ServerKeyBits: 768
  11. SyslogFacility: AUTH
  12. LogLevel: INFO
  13. LoginGraceTime: 120
  14. PermitRootLogin: 'yes'
  15. PasswordAuthentication: 'no'
  16. StrictModes: 'yes'
  17. RSAAuthentication: 'yes'
  18. PubkeyAuthentication: 'yes'
  19. IgnoreRhosts: 'yes'
  20. RhostsRSAAuthentication: 'no'
  21. HostbasedAuthentication: 'no'
  22. PermitEmptyPasswords: 'no'
  23. ChallengeResponseAuthentication: 'no'
  24. X11Forwarding: 'yes'
  25. X11DisplayOffset: 10
  26. PrintMotd: 'no'
  27. PrintLastLog: 'yes'
  28. TCPKeepAlive: 'yes'
  29. AcceptEnv: "LANG LC_*"
  30. Subsystem: "sftp /usr/lib/openssh/sftp-server"
  31. UsePAM: 'yes'
  32. openssh:
  33. auth:
  34. joe:
  35. - name: JOE_VALID_SSH_PUBLIC_KEY
  36. present: True
  37. enc: ssh-rsa
  38. comment: main key
  39. - name: JOE_NON_VALID_SSH_PUBLIC_KEY
  40. present: False
  41. enc: ssh-rsa
  42. comment: obsolete key - removed
  43. dsa:
  44. private_key: |
  45. -----BEGIN DSA PRIVATE KEY-----
  46. NOT_DEFINED
  47. -----END DSA PRIVATE KEY-----
  48. public_key: |
  49. ssh-dss NOT_DEFINED
  50. provide_dsa_keys: False
  51. provide_rsa_keys: False
  52. rsa:
  53. private_key: |
  54. -----BEGIN RSA PRIVATE KEY-----
  55. NOT_DEFINED
  56. -----END RSA PRIVATE KEY-----
  57. public_key: |
  58. ssh-rsa NOT_DEFINED