yplatform/sshconfig/config at master · ysoftwareab/yplatform · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
Include ~/.ssh/yplatform/config.github
Include ~/.ssh/yplatform/config.gitlab
Include ~/.ssh/yplatform/config.sourcehut

IgnoreUnknown UseKeychain

# see https://infosec.mozilla.org/guidelines/openssh#OpenSSH_client#openssh-client
Host *
    HashKnownHosts yes
    # Host keys the client accepts - order here is honored by OpenSSH
    HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256
    KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
    MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
    Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

# see https://stribika.github.io/2015/01/04/secure-secure-shell.html
Host *
    ChallengeResponseAuthentication no
    # Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
    # HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa
    # MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
    PasswordAuthentication no
    PubkeyAuthentication yes
    Protocol 2
    UseRoaming no

# see https://github.com/dolmen/github-keygen
Host *
    ControlMaster auto
    ControlPath /tmp/%r@%h:%p
    # ControlPersist yes
    ControlPersist 60s
    ForwardAgent no
    ForwardX11 no
    LogLevel INFO
    PermitLocalCommand no
    PreferredAuthentications publickey
    PubkeyAuthentication yes
    UseKeychain yes
    UseRoaming no

# misc
Host *
    AddKeysToAgent yes
    IdentityFile ~/.ssh/id_ed25519
    IdentityFile ~/.ssh/id_rsa
    IdentitiesOnly yes
    PubkeyAcceptedKeyTypes +ssh-rsa
    ServerAliveCountMax 0
    ServerAliveInterval 600
    StrictHostKeyChecking ask
    UpdateHostKeys ask
    VerifyHostKeyDNS yes

Host *.tmate.io
    ControlMaster no
    ControlPath no
    ControlPersist no

# allow one-off ssh login with something else than public keys
Host withpassword
    HostName insert-hostname-here.example.com
    PasswordAuthentication yes
    PreferredAuthentications gssapi-with-mic,hostbased,publickey,keyboard-interactive,password