2023-10-25 11:04:44 +00:00
|
|
|
# This is for sshd in management VRF, for ansible and other not-really-OOB stuff.
|
|
|
|
|
PidFile none
|
|
|
|
|
UsePAM no
|
2023-11-18 18:32:17 +00:00
|
|
|
Subsystem sftp /usr/lib/openssh/sftp-server
|
2023-10-25 11:04:44 +00:00
|
|
|
|
|
|
|
|
# Only allow pubkey auth.
|
|
|
|
|
KbdInteractiveAuthentication no
|
|
|
|
|
PasswordAuthentication no
|
|
|
|
|
PermitRootLogin prohibit-password
|
|
|
|
|
|
|
|
|
|
# Disable what we can.
|
|
|
|
|
AllowTcpForwarding no
|
|
|
|
|
GatewayPorts no
|
|
|
|
|
X11Forwarding no
|
