aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--files/etc/ssh/sshd_config.d/custom.conf17
1 files changed, 17 insertions, 0 deletions
diff --git a/files/etc/ssh/sshd_config.d/custom.conf b/files/etc/ssh/sshd_config.d/custom.conf
index ac755e6..e913444 100644
--- a/files/etc/ssh/sshd_config.d/custom.conf
+++ b/files/etc/ssh/sshd_config.d/custom.conf
@@ -1,3 +1,20 @@
+# Authentication
+LoginGraceTime 2m
+PermitRootLogin prohibit-password
+StrictModes yes
+MaxAuthTries 6
+MaxSessions 10
+
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
PermitEmptyPasswords no
+
+# Kerberos options
+KerberosAuthentication no
+
+# GSSAPI options
+GSSAPIAuthentication no
+
+# TODO: Confirm that this is not overridden by the global configuration file?
+# X11 is not installed on this machine anyway.
+X11Forwarding no