Edit file

File name : sshd_config

Content :# READ THIS! Yes, this means you! # # Changing the SSH port, or disabling root login, will prevent DreamHost # management tools from logging into your server for management functions. This # will prevent most functions in the DreamHost Panel from working for users and # domains on your server. # # We recommend that you DO NOT make changes to this file. Port 22 Protocol 2 HostKey /etc/ssh/ssh_host_rsa_key HostKey /etc/ssh/ssh_host_ecdsa_key HostKey /etc/ssh/ssh_host_ed25519_key SyslogFacility AUTH LogLevel VERBOSE LoginGraceTime 40 PermitRootLogin without-password StrictModes yes PubkeyAuthentication yes IgnoreRhosts yes HostbasedAuthentication no PermitEmptyPasswords no X11Forwarding yes X11DisplayOffset 10 PrintMotd no PrintLastLog yes TCPKeepAlive yes AcceptEnv LANG LC_* Subsystem sftp /usr/lib/openssh/sftp-server UsePAM yes UseDNS no MaxStartups 500:50:1000 KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256 Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com MACs hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com # Settings for Google mfa enabled ssh accounts Match Group ssh_gmfa, User *,!root AuthenticationMethods publickey,keyboard-interactive keyboard-interactive # Settings for pubkey AND password enforced accounts Match Group ssh_strict, User *,!root AuthenticationMethods publickey,password

Save