Admin/Phabricator/ssh/sshd_config.phabricator
changeset 70750 07673e7cb5e6
child 70758 5094098f5e0c
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/Admin/Phabricator/ssh/sshd_config.phabricator	Tue Sep 24 16:17:37 2019 +0200
@@ -0,0 +1,24 @@
+# NOTE: You must have OpenSSHD 6.2 or newer; support for AuthorizedKeysCommand
+# was added in this version.
+
+# NOTE: Edit these to the correct values for your setup.
+
+AuthorizedKeysCommand /usr/local/bin/ssh-hook
+AuthorizedKeysCommandUser vcs
+AllowUsers vcs
+
+# You may need to tweak these options, but mostly they just turn off everything
+# dangerous.
+
+Port 2222
+Protocol 2
+PermitRootLogin no
+AllowAgentForwarding no
+AllowTcpForwarding no
+PrintMotd no
+PrintLastLog no
+PasswordAuthentication no
+ChallengeResponseAuthentication no
+AuthorizedKeysFile none
+
+PidFile /var/run/sshd-phabricator.pid