updated /etc/ssh readme
This commit is contained in:
parent
ef9ba96918
commit
a19f626e2b
36
config/etc/ssh/readme.md
Normal file
36
config/etc/ssh/readme.md
Normal file
@ -0,0 +1,36 @@
|
||||
# /etc/ssh: Included files
|
||||
|
||||
## SSH server configuration (sshd_config)
|
||||
|
||||
This is a pretty basic SSH server setup with a few options initially commented
|
||||
out for ease of setup. You should generate SSH Host Keys and enable the
|
||||
relevant lines in the configuration. In addition, you should generate ssh
|
||||
key-pairs for your users and then set both *PermitRootLogin* and
|
||||
*PasswordAuthentication* to **no**.
|
||||
|
||||
The default configuration included here will:
|
||||
- listen on all configured interfaces
|
||||
- **listen on non-standard port 222**
|
||||
- permit root login
|
||||
- permit passwords for authentication
|
||||
|
||||
The commented lines indicate the *recommended settings* and appear directly
|
||||
before the setting currently enabled that should be changed (i.e. line removed
|
||||
and replaced with the commented line above it).
|
||||
|
||||
Please see my post at https://mytechiethoughts.com/<post_address> for detailed
|
||||
instructions on setting up a secure SSH server.
|
||||
|
||||
## Banner file (banner)
|
||||
|
||||
This is a sample file that can be displayed upon successful authentication to
|
||||
your server via SSH. It is included only as an example and does not need to be
|
||||
used. You can delete/change/replace it freely. It is referenced in the
|
||||
*sshd_config* on the line that reads:
|
||||
|
||||
```ini
|
||||
#Banner /etc/ssh/banner
|
||||
```
|
||||
|
||||
If you want to use the banner file, edit it as desired then uncomment this line
|
||||
in your *sshd_config*.
|
Loading…
Reference in New Issue
Block a user