summaryrefslogtreecommitdiff
path: root/ssh.conf
diff options
context:
space:
mode:
Diffstat (limited to 'ssh.conf')
-rw-r--r--ssh.conf9
1 files changed, 5 insertions, 4 deletions
diff --git a/ssh.conf b/ssh.conf
index 391611e..4462742 100644
--- a/ssh.conf
+++ b/ssh.conf
@@ -1,6 +1,10 @@
+# Security, do not allow any access to the git repos outside of allowed users
PermitRootLogin no
PasswordAuthentication no
+PermitTTY no
+AllowAgentForwarding no
+# Point keys to shared data dir
HostKey /var/ssh/host/etc/ssh/ssh_host_rsa_key
HostKey /var/ssh/host/etc/ssh/ssh_host_ecdsa_key
HostKey /var/ssh/host/etc/ssh/ssh_host_ed25519_key
@@ -9,8 +13,5 @@ HostKey /var/ssh/host/etc/ssh/ssh_host_ed25519_key
SyslogFacility AUTH
LogLevel INFO
-PermitTTY no
-AllowAgentForwarding no
-
-# Force our run script that checks for permissions and runs sudo
+# Force run script that checks for permissions and runs sudo
ForceCommand /usr/local/bin/run "$SSH_ORIGINAL_COMMAND"