paulbsd-salt/states/ssh/defaults.yaml
2024-02-07 22:00:05 +01:00

22 lines
450 B
YAML

---
ssh:
enabled: true
pkgs:
- 'openssh-server'
- 'openssh-client'
sshd_config:
LoginGraceTime: 60
PermitRootLogin: 'no'
MaxAuthTries: 3
AddressFamily: any
PasswordAuthentication: 'no'
VersionAddendum: none
Subsystem: sftp /usr/lib/openssh/sftp-server
AllowGroups: admin
X11Forwarding: 'yes'
ssh_config:
'*':
ServerAliveInterval: 120
TCPKeepAlive: 'yes'
AddKeysToAgent: 'yes'