diff options
Diffstat (limited to 'src/ssh.conf')
| -rw-r--r-- | src/ssh.conf | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/src/ssh.conf b/src/ssh.conf new file mode 100644 index 0000000..2940260 --- /dev/null +++ b/src/ssh.conf @@ -0,0 +1,17 @@ +# Security, do not allow any access to the git repos outside of allowed users +PermitRootLogin no +PasswordAuthentication no +PermitTTY no +AllowAgentForwarding no + +# Point keys to shared data dir +HostKey /var/ssh/etc/ssh/ssh_host_rsa_key +HostKey /var/ssh/etc/ssh/ssh_host_ecdsa_key +HostKey /var/ssh/etc/ssh/ssh_host_ed25519_key + +# Logging +SyslogFacility AUTH +LogLevel INFO + +# Force run script that checks for permissions and runs sudo +ForceCommand /usr/local/bin/run "$SSH_ORIGINAL_COMMAND" |