-
Notifications
You must be signed in to change notification settings - Fork 51
/
Copy pathssh_config
73 lines (46 loc) · 2.42 KB
/
ssh_config
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
#
##::[[--- BSD/Linux OpenSSH SSH Config ---]]::##
#===================================================
##----- Global Options -----##
#===================================================
# Connection #
#---------------------------------------------------
AddressFamily = inet
# Encryption #
#---------------------------------------------------
RekeyLimit = 500M 60m
# Authentication #
#---------------------------------------------------
ChallengeResponseAuthentication = no
KbdInteractiveAuthentication = no
PasswordAuthentication = no
PreferredAuthentications = publickey
PubkeyAuthentication = yes
AddKeysToAgent = ask
# Reliability #
#---------------------------------------------------
TCPKeepAlive = yes
# Security #
#---------------------------------------------------
ForwardAgent = yes
ForwardX11 = yes
GatewayPorts = no
HashKnownHosts = yes
StrictHostKeyChecking = ask
# Logging #
#---------------------------------------------------
SyslogFacility = AUTH
LogLevel = VERBOSE
# Environment #
#---------------------------------------------------
# Disabled:
## PermitUserRC = yes
# Ciphers and ReKeying #
#---------------------------------------------------
FingerprintHash = sha256
Ciphers = [email protected],aes128-ctr,aes128-cbc,aes192-ctr,aes192-cbc,[email protected],aes256-ctr,aes256-cbc,[email protected]
HostKeyAlgorithms = ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256
HostbasedAcceptedAlgorithms = ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256
KexAlgorithms = [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,[email protected],curve25519-sha256,diffie-hellman-group-exchange-sha256
MACs = [email protected],[email protected],hmac-sha2-256,hmac-sha2-512
PubkeyAcceptedAlgorithms = ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256