systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 21 Activity Actions

Harden host key

Browse source
This commit is contained in:
Jake Howard 2020-05-23 11:45:53 +01:00
parent 2fe6cf7c93
commit c92f924faa
Signed by: jake
GPG key ID: 57AFB45680EDD477
1 changed files with 1 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
ansible/roles/base/files/sshd_config
View file

@ -11,12 +11,7 @@ ListenAddress 0.0.0.0
# Force SSHv2 Protocol # Force SSHv2 Protocol
Protocol 2 Protocol 2
# HostKeys for protocol version 2 HostKey /etc/ssh/ssh_host_ed25519_key
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKeyAlgorithms ssh-rsa,rsa-sha2-512,rsa-sha2-256
# Privilege Separation is turned on for security # Privilege Separation is turned on for security
UsePrivilegeSeparation yes UsePrivilegeSeparation yes