SSH Configuration

OpenSSH Server

Field	Value
Port	22
Protocol	SSH-2
Root Login	Disabled (global), allowed from private IPs

Key Settings

PermitRootLogin no
PasswordAuthentication yes
PubkeyAuthentication yes
ChallengeResponseAuthentication no
UsePAM yes
LogLevel VERBOSE
ClientAliveInterval 60

Access Control

Groups with SSH access: ssh.main, ssh.app, sftp.main, sftp.app, admins, root

Special SFTP groups with chroot jails:

sftp.main — chroot to /home, no TCP forwarding
sftp.app — chroot to home directory

Authorized Keys

Multiple ED25519 and RSA keys from various users: ty, hermes.cloud, hudsont1391, neura@InspiroBot, etc.

Recommendations

Consider disabling password authentication entirely
Restrict SSH to Tailscale IPs only (eliminates internet-exposed SSH)

SSH Configuration ​

OpenSSH Server ​

Key Settings ​

Access Control ​