📝 Made note on how to set up sshd client

This commit is contained in:
z3rOR0ne 2022-09-08 20:44:01 -07:00
parent 01d44f68d7
commit d8ec758d2d
2 changed files with 26 additions and 0 deletions

11
harden_sshd.txt Normal file
View file

@ -0,0 +1,11 @@
/etc/ssh/sshd_config
PermitEmptyPasswords no
Port 2345 (or some other port than default 22)
PermitRootLogin no
ClientAliveInterval 300
ClientAliveCountMax 2
X11Forwarding no
MaxAuthTries 3
sshd -T

View file

@ -38,3 +38,18 @@ make sure to install all of the test files (jest should already be set up, but y
doas npm install -g jest
pip install pytest
sshd is disabled by default on Artix (a good practice), but let's enable it, follow your harden_sshd.txt guide (just some flags), and add a down file to disable it:
doas ln -s /etc/runit/sv/sshd /run/runit/service
doas sv start sshd
edit /etc/ssh/sshd_config file using harden_sshd.txt guide
cd /etc/runit/sv/sshd
doas touch down
doas chmod +x down
doas sv stop sshd