sshd_config
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

sshd_config
View Options

	# -------------------------------------------------------------
	# OpenSSH configuration
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# Created: 2017-02-28
	# License: Trivial work, not eligible to copyright
	# Source file: roles/core/sshd/files/sshd_config
	# -------------------------------------------------------------
	#
	# <auto-generated>
	# This file is managed by our rOPS SaltStack repository.
	#
	# Changes to this file may cause incorrect behavior
	# and will be lost if the state is redeployed.
	# </auto-generated>

	# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
	# but this is overridden so installations will only check .ssh/authorized_keys
	AuthorizedKeysFile .ssh/authorized_keys

	{% if grains['os'] == 'CentOS' -%}
	# Don't use host DSA key (CentOS by default uses it, see T1352)
	HostKey /etc/ssh/ssh_host_rsa_key
	HostKey /etc/ssh/ssh_host_ecdsa_key
	HostKey /etc/ssh/ssh_host_ed25519_key
	{%- endif %}

	# Nasqueron servers authentication should only occur through SSH keys
	# but PAM can offer extra capabilities if needed like OTP.
	PasswordAuthentication no
	ChallengeResponseAuthentication no
	UsePAM yes

	# Once the core role has been applied to a server, ops users have been created
	# and sudo configured. We can so forbid direct root login.
	PermitRootLogin no

	# Misc options
	PrintMotd {{ "yes" if print_motd else "no" }}
	AcceptEnv LANG LC_*

	# SFTP
	Subsystem sftp {{ sftp }}