Saltstack Official OpenSSH Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

72 lines
1.7KB

  1. sshd_config:
  2. Port: 22
  3. Protocol: 2
  4. HostKey:
  5. - /etc/ssh/ssh_host_rsa_key
  6. - /etc/ssh/ssh_host_dsa_key
  7. - /etc/ssh/ssh_host_ecdsa_key
  8. UsePrivilegeSeparation: 'yes'
  9. KeyRegenerationInterval: 3600
  10. ServerKeyBits: 768
  11. SyslogFacility: AUTH
  12. LogLevel: INFO
  13. LoginGraceTime: 120
  14. PermitRootLogin: 'yes'
  15. PasswordAuthentication: 'no'
  16. StrictModes: 'yes'
  17. RSAAuthentication: 'yes'
  18. PubkeyAuthentication: 'yes'
  19. IgnoreRhosts: 'yes'
  20. RhostsRSAAuthentication: 'no'
  21. HostbasedAuthentication: 'no'
  22. PermitEmptyPasswords: 'no'
  23. ChallengeResponseAuthentication: 'no'
  24. X11Forwarding: 'yes'
  25. X11DisplayOffset: 10
  26. PrintMotd: 'no'
  27. PrintLastLog: 'yes'
  28. TCPKeepAlive: 'yes'
  29. AcceptEnv: "LANG LC_*"
  30. Subsystem: "sftp /usr/lib/openssh/sftp-server"
  31. UsePAM: 'yes'
  32. UseDNS: 'yes'
  33. openssh:
  34. auth:
  35. joe:
  36. - name: JOE_VALID_SSH_PUBLIC_KEY
  37. present: True
  38. enc: ssh-rsa
  39. comment: main key
  40. - name: JOE_NON_VALID_SSH_PUBLIC_KEY
  41. present: False
  42. enc: ssh-rsa
  43. comment: obsolete key - removed
  44. dsa:
  45. private_key: |
  46. -----BEGIN DSA PRIVATE KEY-----
  47. NOT_DEFINED
  48. -----END DSA PRIVATE KEY-----
  49. public_key: |
  50. ssh-dss NOT_DEFINED
  51. ecdsa:
  52. private_key: |
  53. -----BEGIN EC PRIVATE KEY-----
  54. NOT_DEFINED
  55. -----END EC PRIVATE KEY-----
  56. public_key: |
  57. ecdsa-sha2-nistp256 NOT_DEFINED
  58. provide_dsa_keys: False
  59. provide_ecdsa_keys: False
  60. provide_rsa_keys: False
  61. generate_dsa_keys: False
  62. generate_ecdsa_keys: False
  63. generate_rsa_keys: False
  64. rsa:
  65. private_key: |
  66. -----BEGIN RSA PRIVATE KEY-----
  67. NOT_DEFINED
  68. -----END RSA PRIVATE KEY-----
  69. public_key: |
  70. ssh-rsa NOT_DEFINED