Mirrors/RealOrangeOne-infrastructure
1
0
Fork 1
mirror of https://github.com/RealOrangeOne/infrastructure.git synced 2026-07-24 11:29:53 +00:00
Code Issues Projects Releases Wiki Activity

Harden host key

Browse source
This commit is contained in:
Jake Howard 2020-05-23 11:45:53 +01:00
parent 2fe6cf7c93
commit c92f924faa
No known key found for this signature in database
GPG key ID: 57AFB45680EDD477
1 changed files with 1 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

7
ansible/roles/base/files/sshd_config
View file

@ -11,12 +11,7 @@ ListenAddress 0.0.0.0
# Force SSHv2 Protocol
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKeyAlgorithms ssh-rsa,rsa-sha2-512,rsa-sha2-256
HostKey /etc/ssh/ssh_host_ed25519_key
# Privilege Separation is turned on for security
UsePrivilegeSeparation yes