Minimum SSH hardening NLCRC recommends for customer Linux boxes.
sshd_config (ideas — test before disconnecting yourself)
- PasswordAuthentication no (after keys work)
- PermitRootLogin no
- AllowUsers youradmin
- Optional: non-default Port only as light obscurity, not a real control
Keys
- ed25519 keys on admin laptops; store passphrases in a password manager.
- Disable unused accounts; remove old engineer keys when a job ends.
Monitoring
- journalctl -u ssh -f while testing
- fail2ban on sshd jail for internet-facing hosts
Linux
SSH hardening basics for Linux hosts
Board: Linux server · 26 views · Solved
Repair forum
Board-level discussion, BIOS library, and mail-in repair.
Free diagnostic
Return shipping £15
)),
'compact' => true,
])
Sign in to reply.
