-
Notifications
You must be signed in to change notification settings - Fork 7
/
Copy pathconfig
63 lines (56 loc) · 2.48 KB
/
config
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
Include ~/.ssh/yplatform/config.github
Include ~/.ssh/yplatform/config.gitlab
Include ~/.ssh/yplatform/config.sourcehut
IgnoreUnknown UseKeychain
# see https://infosec.mozilla.org/guidelines/openssh#OpenSSH_client#openssh-client
Host *
HashKnownHosts yes
# Host keys the client accepts - order here is honored by OpenSSH
HostKeyAlgorithms [email protected],[email protected],ssh-ed25519,ssh-rsa,[email protected],[email protected],[email protected],ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256
KexAlgorithms [email protected],ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
MACs [email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected]
# see https://stribika.github.io/2015/01/04/secure-secure-shell.html
Host *
ChallengeResponseAuthentication no
# HostKeyAlgorithms [email protected],[email protected],ssh-ed25519,ssh-rsa
# MACs [email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,[email protected]
PasswordAuthentication no
PubkeyAuthentication yes
Protocol 2
UseRoaming no
# see https://github.com/dolmen/github-keygen
Host *
ControlMaster auto
ControlPath /tmp/%r@%h:%p
# ControlPersist yes
ControlPersist 60s
ForwardAgent no
ForwardX11 no
LogLevel INFO
PermitLocalCommand no
PreferredAuthentications publickey
PubkeyAuthentication yes
UseKeychain yes
UseRoaming no
# misc
Host *
AddKeysToAgent yes
IdentityFile ~/.ssh/id_ed25519
IdentityFile ~/.ssh/id_rsa
IdentitiesOnly yes
ServerAliveCountMax 0
ServerAliveInterval 600
StrictHostKeyChecking ask
UpdateHostKeys ask
VerifyHostKeyDNS yes
Host *.tmate.io
ControlMaster no
ControlPath no
ControlPersist no
# allow one-off ssh login with something else than public keys
Host withpassword
HostName insert-hostname-here.example.com
PasswordAuthentication yes
PreferredAuthentications gssapi-with-mic,hostbased,publickey,keyboard-interactive,password