summaryrefslogtreecommitdiff
path: root/src/ssh.conf
diff options
context:
space:
mode:
authorGravatar Matthias Lucas Jaros <jarlucmat@mailbox.org>2025-10-20 10:20:42 +0200
committerGravatar Matthias Lucas Jaros <jarlucmat@mailbox.org>2025-10-20 10:20:42 +0200
commit9d9355a379f8a9922645ecd87b66f68acbb6bc89 (patch)
tree3491b69ae5d327556f0e5d4bd732ec6208746ece /src/ssh.conf
parentbaaa4d83c98b42a1df98e70b972774ad8f5b8ead (diff)
Moved files to src and renamed variables
Diffstat (limited to 'src/ssh.conf')
-rw-r--r--src/ssh.conf17
1 files changed, 17 insertions, 0 deletions
diff --git a/src/ssh.conf b/src/ssh.conf
new file mode 100644
index 0000000..2940260
--- /dev/null
+++ b/src/ssh.conf
@@ -0,0 +1,17 @@
+# Security, do not allow any access to the git repos outside of allowed users
+PermitRootLogin no
+PasswordAuthentication no
+PermitTTY no
+AllowAgentForwarding no
+
+# Point keys to shared data dir
+HostKey /var/ssh/etc/ssh/ssh_host_rsa_key
+HostKey /var/ssh/etc/ssh/ssh_host_ecdsa_key
+HostKey /var/ssh/etc/ssh/ssh_host_ed25519_key
+
+# Logging
+SyslogFacility AUTH
+LogLevel INFO
+
+# Force run script that checks for permissions and runs sudo
+ForceCommand /usr/local/bin/run "$SSH_ORIGINAL_COMMAND"