aboutsummaryrefslogtreecommitdiff
path: root/ssh/sshd-config
diff options
context:
space:
mode:
authorAkshay Nair <phenax5@gmail.com>2026-07-05 19:38:11 +0530
committerAkshay Nair <phenax5@gmail.com>2026-07-05 19:38:11 +0530
commitb3d4fe72d35d7542f54b8c81e2f59f66723df1df (patch)
treeb02f57bf40fe5f7b542f2501067c472e9b6abb04 /ssh/sshd-config
parentd2fd01c0181fd557a1750d8c36fbe1394431766c (diff)
downloadbacchus-remote-b3d4fe72d35d7542f54b8c81e2f59f66723df1df.tar.gz
bacchus-remote-b3d4fe72d35d7542f54b8c81e2f59f66723df1df.zip
Some hardening
Diffstat (limited to 'ssh/sshd-config')
-rw-r--r--ssh/sshd-config/git.conf6
-rw-r--r--ssh/sshd-config/host.conf4
2 files changed, 10 insertions, 0 deletions
diff --git a/ssh/sshd-config/git.conf b/ssh/sshd-config/git.conf
new file mode 100644
index 0000000..102725a
--- /dev/null
+++ b/ssh/sshd-config/git.conf
@@ -0,0 +1,6 @@
+Match Group git
+ X11Forwarding no
+ AllowTcpForwarding no
+ PermitTunnel no
+ AllowAgentForwarding no
+ GatewayPorts no
diff --git a/ssh/sshd-config/host.conf b/ssh/sshd-config/host.conf
new file mode 100644
index 0000000..851b876
--- /dev/null
+++ b/ssh/sshd-config/host.conf
@@ -0,0 +1,4 @@
+MaxAuthTries 3
+LoginGraceTime 20
+PasswordAuthentication no
+KbdInteractiveAuthentication no