aboutsummaryrefslogtreecommitdiffstats
path: root/roles/prosody_letsencrypt_proxy/templates/etc/ssh
diff options
context:
space:
mode:
authorStonewall Jackson <stonewall@sacredheartsc.com>2023-02-04 01:23:43 -0500
committerStonewall Jackson <stonewall@sacredheartsc.com>2023-02-04 01:52:13 -0500
commit0261e875679f1bf63c8d689da7fc7e014597885d (patch)
tree3f19cd74a0c1070944f75437f30b098d6ef2ffcb /roles/prosody_letsencrypt_proxy/templates/etc/ssh
downloadselfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.tar.gz
selfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.zip
initial commit
Diffstat (limited to 'roles/prosody_letsencrypt_proxy/templates/etc/ssh')
-rw-r--r--roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf7
1 files changed, 7 insertions, 0 deletions
diff --git a/roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf b/roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf
new file mode 100644
index 0000000..7d6b9a2
--- /dev/null
+++ b/roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf
@@ -0,0 +1,7 @@
+Match user {{ prosody_le_user }}
+ AuthorizedKeysFile {{ prosody_le_authorized_keys_dir }}/%u
+ ChrootDirectory %h
+ ForceCommand internal-sftp -R
+ AllowTcpForwarding no
+ X11Forwarding no
+ AuthenticationMethods publickey