bin/srsync: add --protect-args

[config/dotfiles.git] / sshd_config

diff --git a/sshd_config b/sshd_config
index 28e246517a926146fac0f0b9da723a18d023473f..47d857762fd8fd647763a2f2f38615279c872b78 100644 (file)
--- a/sshd_config
+++ b/sshd_config
@@ -25,6 +25,11 @@ Port 22
 # Only use protocol 2. Protocol 1 is insecure. (default)
 Protocol 2
 
+# Stronger algorithms. See ssh_config for details.
+KexAlgorithms diffie-hellman-group-exchange-sha256
+Ciphers aes256-ctr
+MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-512
+
 # Use privilege separation for increased security. "sandbox" applies
 # additional restrictions on the unprivileged process.
 UsePrivilegeSeparation sandbox
@@ -52,8 +57,8 @@ StrictModes yes
 # Allow more sessions per network connection (e.g. from ControlMaster/-M).
 # When not enough sessions are available this message is sent by ssh:
 # "mux_client_request_session: session request failed: Session open refused by
-# peer". Not necessary on all servers.
-#MaxSessions 30
+# peer".
+MaxSessions 30
 
 # Don't accept any environment variables from the client (default).
 AcceptEnv