1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2025-01-18 08:06:16 +01:00
infrastructure/roles/sshd/templates/sshd_config.j2
Evangelos Foutras 8e6d5474e4
sshd: use drop-in for basic sshd configuration
This saves us from having to rebase on every upstream config change.
2023-08-13 22:35:54 +03:00

16 lines
338 B
Django/Jinja

Port {{ ansible_port | default(22) }}
LogLevel VERBOSE
PasswordAuthentication no
{% if 'buildservers' not in group_names %}
AllowAgentForwarding no
AllowTcpForwarding no
{% else %}
Match User root
AllowAgentForwarding no
AllowTcpForwarding no
{% endif %}
# unlink forwarded sockets; for gpg agent forwarding
StreamLocalBindUnlink yes