From 0261e875679f1bf63c8d689da7fc7e014597885d Mon Sep 17 00:00:00 2001
From: Stonewall Jackson <stonewall@sacredheartsc.com>
Date: Sat, 4 Feb 2023 01:23:43 -0500
Subject: initial commit

---
 .../templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf       | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf

(limited to 'roles/prosody_letsencrypt_proxy/templates/etc/ssh')

diff --git a/roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf b/roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf
new file mode 100644
index 0000000..7d6b9a2
--- /dev/null
+++ b/roles/prosody_letsencrypt_proxy/templates/etc/ssh/sshd_config.d/99-prosody-le-proxy.conf
@@ -0,0 +1,7 @@
+Match user {{ prosody_le_user }}
+  AuthorizedKeysFile {{ prosody_le_authorized_keys_dir }}/%u
+  ChrootDirectory %h
+  ForceCommand internal-sftp -R
+  AllowTcpForwarding no
+  X11Forwarding no
+  AuthenticationMethods publickey
-- 
cgit