From f63a147d6b9c2ffd87bee0d30a71310f2c9ef8af Mon Sep 17 00:00:00 2001 From: Matthias Lucas Jaros Date: Sun, 19 Oct 2025 18:21:05 +0200 Subject: Cleaned up file structure and script --- ssh.conf | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'ssh.conf') diff --git a/ssh.conf b/ssh.conf index 391611e..4462742 100644 --- a/ssh.conf +++ b/ssh.conf @@ -1,6 +1,10 @@ +# Security, do not allow any access to the git repos outside of allowed users PermitRootLogin no PasswordAuthentication no +PermitTTY no +AllowAgentForwarding no +# Point keys to shared data dir HostKey /var/ssh/host/etc/ssh/ssh_host_rsa_key HostKey /var/ssh/host/etc/ssh/ssh_host_ecdsa_key HostKey /var/ssh/host/etc/ssh/ssh_host_ed25519_key @@ -9,8 +13,5 @@ HostKey /var/ssh/host/etc/ssh/ssh_host_ed25519_key SyslogFacility AUTH LogLevel INFO -PermitTTY no -AllowAgentForwarding no - -# Force our run script that checks for permissions and runs sudo +# Force run script that checks for permissions and runs sudo ForceCommand /usr/local/bin/run "$SSH_ORIGINAL_COMMAND" -- cgit v1.3.1