{"id":19410388,"url":"https://github.com/seheyah/sshd","last_synced_at":"2026-02-17T17:31:31.385Z","repository":{"id":152930717,"uuid":"592489892","full_name":"seheyah/sshd","owner":"seheyah","description":"This repository hosts my hardened version of OpenSSH server on OpenBSD.","archived":false,"fork":false,"pushed_at":"2023-06-05T21:05:08.000Z","size":27,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-06-07T22:41:00.071Z","etag":null,"topics":["hardening","openssh-server","sshd-config","sshd-hardening"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/seheyah.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2023-01-23T20:53:16.000Z","updated_at":"2023-01-23T21:15:32.000Z","dependencies_parsed_at":null,"dependency_job_id":"48737322-31cb-486c-901c-d69ecf315582","html_url":"https://github.com/seheyah/sshd","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/seheyah/sshd","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seheyah%2Fsshd","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seheyah%2Fsshd/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seheyah%2Fsshd/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seheyah%2Fsshd/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/seheyah","download_url":"https://codeload.github.com/seheyah/sshd/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/seheyah%2Fsshd/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278723919,"owners_count":26034691,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-07T02:00:06.786Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hardening","openssh-server","sshd-config","sshd-hardening"],"created_at":"2024-11-10T12:16:35.751Z","updated_at":"2025-10-07T05:34:54.172Z","avatar_url":"https://github.com/seheyah.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# sshd_config hardened file\n🎯 This repository hosts my hardened version of OpenSSH server on [OpenBSD](https://www.openbsd.org).\n\n📝 Here the [man](https://man.openbsd.org/sshd_config) for sshd_config.\n\n🛡️ Too many admins overlook SSH configuration when setting up new systems. Unfortunately, the defaults for many operating systems are optimized for compatibility, **not security**❗\n\n## Prerequisites\n * You need to have an account with doas set correctly.\n * You need to create a key for your user:\n   * `ssh-keygen -f ~/user-key-ed25519 -t ed25519` -\u003e Enter a passphrase please 😉\n   * `ssh-copy-id -i ~/.ssh/user-key-ed25519 user@host_destination:/.....`\u003cbr\u003e\nOnce the public key has been configured on the server, the server will allow any connecting user that has the private key to log in. During the login process, the client proves possession of the private key by digitally signing the key exchange.\n\n## Usage\n* Backup your current file like this:\n  * cp `/etc/ssh/sshd_config` `/etc/ssh/sshd_config.ori`\n* Download the file `sshd_config` from the repository in your local terminal session\n* Review the content of the `sshd_config` file to make sure those settings are suitable with your configuration:\n  * Search AllowUsers and replace your_username_here with your username\n  * Search Banner and replace /your_path_here/your_file_here with the right path file for your banner\n* Overwrite your file:\n  * mv `ssh_config` `/etc/ssh_sshd/config`\n* Reload SSHDaemon\n  * `rcctl restart sshd`\n\n## Blueteam - Check new settings\nYou can test your OpenSSH server configuration here:\n  * [SSH Audith](https://www.sshaudit.com/) \n  * [SSH Check](https://sshcheck.com/)\n\n🐡 Have Fun!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fseheyah%2Fsshd","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fseheyah%2Fsshd","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fseheyah%2Fsshd/lists"}