Directory structures and names changed to be follow the order of creation->provisioning->maintainance

2026-07-07 11:41:21 +00:00
parent e033652d3e
commit efa9dfcbac
17 changed files with 48 additions and 41 deletions
@@ -0,0 +1,29 @@
+PubkeyAuthentication yes
+AuthorizedKeysFile	.ssh/authorized_keys
+PasswordAuthentication no
+KbdInteractiveAuthentication no
+UsePAM no
+# Disable password authentication — keys only
+PasswordAuthentication no
+ChallengeResponseAuthentication no
+
+
+AllowGroups sshusers
+PrintMotd no
+AcceptEnv LANG LC_*
+ClientAliveCountMax 0
+ClientAliveInterval 300
+Port 22
+
+
+# Disable root login entirely
+PermitRootLogin no
+
+# Limit authentication attempts
+MaxAuthTries 3
+MaxSessions 3
+
+# Use modern key exchange and ciphers, prioritize post-quantum algorithms (mlkem and sntrup)
+KexAlgorithms mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org
+Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com
+MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com