From 81ddf8bc5359ef6daf8a9003f5101b5367e43e73 Mon Sep 17 00:00:00 2001 From: xyz Date: Wed, 9 Nov 2022 18:52:40 -0800 Subject: studio laptop change to headless server --- etc/nftables.conf | 2 +- etc/ssh/sshd_config | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) (limited to 'etc') diff --git a/etc/nftables.conf b/etc/nftables.conf index c0d0601d..76044dba 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -21,7 +21,7 @@ table inet my_table { ip protocol icmp accept meta l4proto ipv6-icmp accept - #tcp dport ssh accept + tcp dport ssh accept #tcp dport searx accept tcp dport qrcp accept udp dport mdns accept diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config index 7f697951..0b641296 100644 --- a/etc/ssh/sshd_config +++ b/etc/ssh/sshd_config @@ -29,7 +29,7 @@ # Authentication: #LoginGraceTime 2m -#PermitRootLogin prohibit-password +PermitRootLogin no #StrictModes yes #MaxAuthTries 6 #MaxSessions 10 @@ -54,7 +54,7 @@ AuthorizedKeysFile .ssh/authorized_keys #IgnoreRhosts yes # To disable tunneled clear text passwords, change to no here! -#PasswordAuthentication yes +PasswordAuthentication no #PermitEmptyPasswords no # Change to no to disable s/key passwords @@ -79,7 +79,7 @@ KbdInteractiveAuthentication no # If you just want the PAM account and session checks to run without # PAM authentication, then enable this but set PasswordAuthentication # and KbdInteractiveAuthentication to 'no'. -UsePAM yes +UsePAM no #AllowAgentForwarding yes #AllowTcpForwarding yes -- cgit v1.2.3-70-g09d2