feat: update sshd_config

- AddressFamily from inet to any
- Allow root login with authorized keys
This commit is contained in:
2021-09-30 07:57:41 +00:00
parent 8aa2bc2f98
commit 6ac701886a

View File

@ -1,9 +1,10 @@
Port 46571 Port 46571
AddressFamily inet AddressFamily any
Protocol 2 Protocol 2
HostKey /etc/ssh/ssh_host_ecdsa_key HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
SyslogFacility AUTHPRIV SyslogFacility AUTHPRIV
PermitRootLogin no PermitRootLogin prohibit-password
AuthorizedKeysFile .ssh/authorized_keys AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no PasswordAuthentication no
ChallengeResponseAuthentication no ChallengeResponseAuthentication no
@ -17,11 +18,8 @@ TCPKeepAlive yes
ClientAliveInterval 60 ClientAliveInterval 60
UseDNS no UseDNS no
PrintMotd no PrintMotd no
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LANG LC_*
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT Subsystem sftp /usr/lib/openssh/sftp-server
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS
Subsystem sftp /usr/libexec/openssh/sftp-server
Match User kairee Match User kairee
PasswordAuthentication yes PasswordAuthentication yes