hardening

Signed-off-by: Hadi <[email protected]>
2026-10-05 19:28:26 +02:00 · 2026-04-11 11:27:39 +02:00
parent 907f83f904
commit edbdc57095
6 changed files with 59 additions and 9 deletions
@@ -10,6 +10,15 @@ in {
      PermitRootLogin = "no";
      PasswordAuthentication = false;
      AllowUsers = [username];
+      MaxAuthTries = 3;
+      LoginGraceTime = 20;
+      X11Forwarding = false;
+      AllowAgentForwarding = false;
+      AllowTcpForwarding = false;
+      ClientAliveInterval = 300;
+      ClientAliveCountMax = 2;
+      KexAlgorithms = ["curve25519-sha256" "curve25519-sha256@libssh.org"];
+      Ciphers = ["chacha20-poly1305@openssh.com" "aes256-gcm@openssh.com"];
    };
  };