summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Matthias Lucas Jaros <jarlucmat@mailbox.org>2025-10-19 18:21:05 +0200
committerGravatar Matthias Lucas Jaros <jarlucmat@mailbox.org>2025-10-19 18:21:05 +0200
commitf63a147d6b9c2ffd87bee0d30a71310f2c9ef8af (patch)
tree1bd7579521e46b68b2230d6bffd383898308e4b9
parent2294af355a549070544eb49638eda6b05cd61a05 (diff)
Cleaned up file structure and script
-rw-r--r--ssh.conf9
1 files changed, 5 insertions, 4 deletions
diff --git a/ssh.conf b/ssh.conf
index 391611e..4462742 100644
--- a/ssh.conf
+++ b/ssh.conf
@@ -1,6 +1,10 @@
+# Security, do not allow any access to the git repos outside of allowed users
PermitRootLogin no
PasswordAuthentication no
+PermitTTY no
+AllowAgentForwarding no
+# Point keys to shared data dir
HostKey /var/ssh/host/etc/ssh/ssh_host_rsa_key
HostKey /var/ssh/host/etc/ssh/ssh_host_ecdsa_key
HostKey /var/ssh/host/etc/ssh/ssh_host_ed25519_key
@@ -9,8 +13,5 @@ HostKey /var/ssh/host/etc/ssh/ssh_host_ed25519_key
SyslogFacility AUTH
LogLevel INFO
-PermitTTY no
-AllowAgentForwarding no
-
-# Force our run script that checks for permissions and runs sudo
+# Force run script that checks for permissions and runs sudo
ForceCommand /usr/local/bin/run "$SSH_ORIGINAL_COMMAND"