24 lines
567 B
Plaintext
24 lines
567 B
Plaintext
# Bare OS sshd — stock defaults (see man sshd_config)
|
|
# Host keys live on the writable personal drive (not under read-only /etc).
|
|
|
|
Port 2222
|
|
ListenAddress 127.0.0.1
|
|
|
|
# Writable host key (generated on first start if missing)
|
|
HostKey ~/.config/bare-os/ssh/host/ssh_host_ed25519_key
|
|
|
|
PermitRootLogin no
|
|
PasswordAuthentication yes
|
|
PubkeyAuthentication yes
|
|
PermitEmptyPasswords no
|
|
ChallengeResponseAuthentication no
|
|
|
|
AuthorizedKeysFile .ssh/authorized_keys
|
|
|
|
AllowTcpForwarding no
|
|
MaxAuthTries 6
|
|
ClientAliveInterval 60
|
|
ClientAliveCountMax 3
|
|
|
|
Subsystem sftp internal-sftp
|