Clément Désiles
642a0f8ea4
sshd Banner fires on every connection (scp, sftp, non-interactive), the wrong layer for a welcome banner. Move to .zprofile, interactive login shells only.
12 lines
408 B
YAML
12 lines
408 B
YAML
---
|
|
ssh_port: 22
|
|
ssh_allowed_networks:
|
|
- { src: "192.168.1.0/24", comment: "SSH from LAN" }
|
|
- { src: "192.168.27.0/27", comment: "SSH from VPN" }
|
|
ssh_users: "jokester" # space separated if many
|
|
ssh_config_dir: "/etc/ssh"
|
|
sshd_config: "{{ ssh_config_dir }}/sshd_config"
|
|
sshd_binary: "/usr/sbin/sshd"
|
|
ssh_authorized_keys_fallback_enabled: false
|
|
ssh_authorized_keys_fallback_dir: "/etc/ssh/authorized_keys"
|