Aminda Suomalainen
ddbd1acca0
ssh: disable RSA host key
2024-01-12 13:50:49 +02:00
Aminda Suomalainen
d2c6f99401
ssh_config: remove deprecated option useroaming
...
Even Debian Bookworm mentions it as deprecated in ssh -vvv and I seriously doubt I have such old SSH running anywhere
2023-10-28 22:27:06 +03:00
Aminda Suomalainen
2c47aaae48
sshd_config.d/README.md: fix formatting, note priority
2023-09-28 14:35:21 +03:00
Aminda Suomalainen
c0fcc82c4d
sshd_config: add 00- prefix to basic-security.conf as apparently first wins in ssh
2023-09-28 14:34:13 +03:00
Aminda Suomalainen
f20e23df42
sshd_config.d: maybe keyed root login is fine in special case of SteamOS on Steam Deck?
2023-09-27 18:02:50 +03:00
Aminda Suomalainen
8309e9254e
ssh_config: StrictHostKeyChecking accept-new
2023-04-03 11:03:48 +03:00
Aminda Suomalainen
2e6a03d402
sastisfy editorconfig check
2023-02-21 19:08:54 +02:00
Aminda Suomalainen
19994e3286
run prettier
2023-02-21 17:54:39 +02:00
Aminda Suomalainen
1385bf6105
ssh_config: comment ProxyCommand
...
I just keep disabling it anyway so it's more harm than good
2023-02-21 10:11:34 +02:00
Aminda Suomalainen
5ee54038de
etc/ssh/ssh_config: retab
2023-02-17 17:29:45 +02:00
Aminda Suomalainen
caa0d5e185
etc/ssh/ssh_config: add VisualHostKey yes
2022-12-19 19:42:10 +02:00
Aminda Suomalainen
b350e525e6
etc/ssh/ssh_config: torify ssh
2022-10-10 23:00:16 +03:00
Aminda Suomalainen
f58d0d7d01
ssh/user-permit-password: add example for multiple users
2022-01-16 15:15:09 +02:00
Aminda Suomalainen
9c7d0c6210
etc/ssh/config.d: add example.conf
...
So I can stop having to dig this from manual every time I want to
configure a new host, and a couple of options I haven't used previously,
but could as they seem nice
2021-06-18 13:48:41 +03:00
Aminda Suomalainen
c6a75f0962
ssh/anoncvs.conf: fix typo
2021-05-04 16:18:31 +03:00
Aminda Suomalainen
288b010fe5
sshd: move mikaela-prohibit-password.conf to broken/
...
Apparently OpenSSH only allows PasswordAuthentication yes within a Match
block.
2021-02-02 14:12:43 +02:00
Aminda Suomalainen
1be2720861
sshd: explicitly "terminate" Match blocks by Match All
...
https://unix.stackexchange.com/a/303982/17126 & man sshd_config
2021-02-02 13:58:35 +02:00
Aminda Suomalainen
3260950712
sshd/anoncvs.conf: vcs users shouldn't ever be asked for a password
...
even if the system would allow that.
2021-02-02 13:06:04 +02:00
Aminda Suomalainen
7ad17f8087
sshd/user-permit-password.conf: note on how to allow specific user to use passwords
2021-02-01 17:11:06 +02:00
Aminda Suomalainen
1503367c86
sshd_config & ….d/README: note min version & date
2021-01-31 13:51:06 +02:00
Aminda Suomalainen
f75bc7bd07
sshd/basic-security.conf: remove deprecated option
...
> /etc/ssh/sshd_config.d/basic-security.conf line 24: Deprecated option UsePrivilegeSeparation
OpenSSH_8.4p1, OpenSSL 1.1.1i FIPS 8 Dec 2020
2021-01-31 13:39:51 +02:00
Aminda Suomalainen
0151bee9b0
sshd/mikaela-prohibit-password.conf: add AuthenticationMethods publickey
2021-01-30 22:15:51 +02:00
Aminda Suomalainen
f1ea1e17d9
etc/ssh: rm copy
2021-01-30 21:35:05 +02:00
Aminda Suomalainen
0572613d99
etc/ssh: cut sshd_config into multiple .confs
2021-01-30 21:31:38 +02:00
Aminda Suomalainen
c5fa3daf29
sshd_config.d: read Mozilla docs & adjust accordingly
...
https://infosec.mozilla.org/guidelines/openssh
2021-01-30 21:18:41 +02:00
Aminda Suomalainen
5211fb772c
sshd_config.d: add anoncvs.conf
2021-01-30 21:00:06 +02:00
Aminda Suomalainen
de3a0739b4
sshd_config.d: add mikaela-prohibit-password.conf
...
Resolves : #88
2021-01-30 20:50:21 +02:00
Aminda Suomalainen
a7c643bb7a
etc/sshd_config.d: add basic-security.conf
...
Ref: 88
2021-01-30 20:47:21 +02:00
856085bd74
ssh_config: document ForwardAgent and ForwardX11...
...
...Previously they were no without explanation, but it never hurts to
explicitly have comments on not doing that, I didn't quickly find
anything nice for ForwardAgent, but I remember the Matrix.org people
somehow avoiding hearing it and ForwardX11 first result was that
StackExchange.
2020-05-22 14:36:26 +03:00
d8d48508bd
ssh_config: update comments, add Includes
...
Resolves : #69
2020-05-22 14:29:37 +03:00
Aminda Suomalainen
95bcf095df
VerifyHostKeyByDNS is supposed to be yes
...
fix previous commit, I imagine I changed it by accident.
2019-05-11 00:58:00 +03:00
Aminda Suomalainen
e634ee8863
ssh_config: update comment for VerifyHostKeyDNS
...
OpenSSH is evil and gives you three not-optimal options to this:
A) trust DNSSEC and don't write known_hosts
B) ask whether to trust DNS, but don't bother telling me if it's signed
C) don't even check SSHFP
I see A) as the least evil, but I wish known_hosts was written.
Alternatively B) should tell me whether there is DNSSEC or not, not
only "matching keys found from DNS" or whatever it says always.
2019-05-09 18:44:36 +03:00
Aminda Suomalainen
492cac7158
Revert "ssh_config: controlpersist auto instead of on"
...
This reverts commit 330e8a80ad
2018-10-11 13:45:31 +03:00
Aminda Suomalainen
330e8a80ad
ssh_config: controlpersist auto instead of on
...
just in case that would be used for tracking and hoping that SSH is
clever enough.
2018-10-07 21:12:08 +03:00
Aminda Suomalainen
b8bda9cf49
ssh_config: use more private ControlPath
2018-10-07 20:54:41 +03:00
Aminda Suomalainen
9a662594d2
Fix #87 (explain ssh_config UseRoaming no)
2016-01-14 20:37:51 +02:00
Aminda Suomalainen
bbfb63dabd
unify the two ssh_config files (fix typos)
2016-01-14 16:59:18 +02:00
Aminda Suomalainen
9d5db7ee3c
ssh_config: add "UseRoaming no"
...
https://twitter.com/msfriedl/status/687635945642967040
2016-01-14 16:47:30 +02:00
Aminda Suomalainen
d903ba5985
sshd_config: no instead of No
...
Permitrootlogin had it for some reason and Jolla's sshd didn't like it.
2016-01-06 10:17:33 +02:00
Aminda Suomalainen
c42ae8eb43
ssh: also send EDITOR
2015-09-12 11:45:42 +03:00
Aminda Suomalainen
fdf8255372
ssh: send/accept also TZ TERM
2015-09-12 11:42:44 +03:00
Aminda Suomalainen
0f00443a7b
sshd_config: mention the LC_ALL anyway
...
my config files are horrible, too many comments.
2015-09-06 18:42:36 +03:00
Aminda Suomalainen
96ca38818f
sshd_config: don't talk so much about locales
2015-09-06 18:40:02 +03:00
Aminda Suomalainen
801e3e0941
sshd_config: AcceptEnv LANG, LANGUAGE LC_*
...
but not LC_ALL and there is no asterisk, the varibles are allowed
separately. It's very unlikely that someone invents a new locale type.
2015-09-06 18:36:48 +03:00
Aminda Suomalainen
a3d5fbd9d7
sshd_config: http://serverfault.com/a/660325
2015-09-06 18:27:50 +03:00
Aminda Suomalainen
a0352630fd
sshd_config: verbose logging of sftp
2015-09-06 17:37:34 +03:00
Aminda Suomalainen
8d55bc53db
sshd_config: use internal sftp & fixes
...
thanks again @grawity
2015-09-06 17:20:12 +03:00
Aminda Suomalainen
c82b706942
fix 7470403158
...
thanks @DarthGandalf and @grawity on #znc
2015-09-06 17:13:21 +03:00
Aminda Suomalainen
7470403158
sshd_config: add Fedora & Gentoo sftp-server
...
thanks Conjuro and @DarthGandalf on #znc
2015-09-06 17:09:55 +03:00
Aminda Suomalainen
774346c8d0
fix sshd_config
2015-09-06 08:42:29 +03:00
Aminda Suomalainen
Mikaela Suomalainen