summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--etc/ssh/sshd_config4
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config
index fb66c21d..f66c0efd 100644
--- a/etc/ssh/sshd_config
+++ b/etc/ssh/sshd_config
@@ -114,3 +114,7 @@ Subsystem sftp /usr/lib/ssh/sftp-server
# AllowTcpForwarding no
# PermitTTY no
# ForceCommand cvs server
+
+# Based on manpage, setting PasswordAuthentication no, and default KbdInteractiveAuthentication no, with other defaults seems already equivalent to AuthenticationMethods publickey, but I still put it here for redundancy.
+# https://wiki.archlinux.org/title/OpenSSH#Force_public_key_authentication
+AuthenticationMethods publickey