From 430e86a9633c60904e684f86561fcc47e0b9f557 Mon Sep 17 00:00:00 2001
From: urosm <urosm@kompot.si>
Date: Sun, 28 Jan 2024 21:39:05 +0100
Subject: [PATCH] add `ssh` config

---
 .config/ssh/sshd_config.d/20-deny_root.conf            | 1 +
 .config/ssh/sshd_config.d/20-force_publickey_auth.conf | 2 ++
 2 files changed, 3 insertions(+)
 create mode 100644 .config/ssh/sshd_config.d/20-deny_root.conf
 create mode 100644 .config/ssh/sshd_config.d/20-force_publickey_auth.conf

diff --git a/.config/ssh/sshd_config.d/20-deny_root.conf b/.config/ssh/sshd_config.d/20-deny_root.conf
new file mode 100644
index 0000000..7ff52c7
--- /dev/null
+++ b/.config/ssh/sshd_config.d/20-deny_root.conf
@@ -0,0 +1 @@
+PermitRootLogin no
diff --git a/.config/ssh/sshd_config.d/20-force_publickey_auth.conf b/.config/ssh/sshd_config.d/20-force_publickey_auth.conf
new file mode 100644
index 0000000..51a3763
--- /dev/null
+++ b/.config/ssh/sshd_config.d/20-force_publickey_auth.conf
@@ -0,0 +1,2 @@
+PasswordAuthentication no
+AuthenticationMethods publickey