21 lines
No EOL
562 B
Django/Jinja
21 lines
No EOL
562 B
Django/Jinja
Include /etc/ssh/sshd_config.d/*.conf
|
|
|
|
ChallengeResponseAuthentication no
|
|
UsePAM no
|
|
X11Forwarding yes
|
|
PrintMotd no
|
|
AcceptEnv LANG LC_*
|
|
Subsystem sftp /usr/lib/openssh/sftp-server
|
|
Port 80
|
|
GatewayPorts yes
|
|
PermitRootLogin no
|
|
PubkeyAuthentication yes
|
|
AuthorizedKeysFile %h/.ssh/authorized_keys
|
|
PasswordAuthentication yes
|
|
PermitEmptyPasswords no
|
|
GSSAPIAuthentication no
|
|
AuthenticationMethods publickey,password
|
|
|
|
# Disable 2fa while on VPN
|
|
Match address 10.10.0.0/24,10.8.0.0/24,10.230.0.0/16,136.206.15.0/24,136.206.16.0/24
|
|
AuthenticationMethods publickey password |