CHTJonas

server-side config

Mar 7th, 2020
149
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # https://infosec.mozilla.org/guidelines/openssh
  2.  
  3. HostKey /etc/ssh/ssh_host_ed25519_key
  4. HostKey /etc/ssh/ssh_host_rsa_key
  5. HostKey /etc/ssh/ssh_host_ecdsa_key
  6.  
  7. HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256
  8. KexAlgorithms curve25519-sha256@libssh.org,curve25519-sha256
  9. Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
  10. MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com
  11.  
  12. RekeyLimit default 900
  13. LogLevel VERBOSE
  14. PermitRootLogin No
  15. ClientAliveInterval 15
  16. ClientAliveCountMax 3
RAW Paste Data