sshd/anoncvs.conf: vcs users shouldn't ever be asked for a password

even if the system would allow that.
2021-02-02 13:06:04 +02:00 · 2021-02-02 13:06:04 +02:00 · 3260950712
parent 2711c5975e
commit 3260950712
1 changed files with 2 additions and 0 deletions
--- a/etc/ssh/sshd_config.d/anoncvs.conf
+++ b/etc/ssh/sshd_config.d/anoncvs.conf
@ -1,6 +1,8 @@
 # Version Control System accounts musn't have X11Forwarding, TCP Forwarding
 # or TTY. The anoncvs is usually a comment in stock sshd_config
 Match User anoncvs,git,gitea
+	PasswordAuthentication no
+	AuthenticationMethods publickey
 	X11Forwarding no
 	AllowTcpForwarding no
 	PermitTTY no