Initial commit

2025-12-27 20:34:15 +01:00
commit 3e91584fad
23 changed files with 964 additions and 0 deletions
--- a/server/sshd/sshd_config
+++ b/server/sshd/sshd_config
@@ -0,0 +1,16 @@
+
+# core hardening (example — adjust to your policy)
+Port 2222
+Protocol 2
+PasswordAuthentication no
+PubkeyAuthentication yes
+PermitRootLogin no
+
+
+# For your tunneling use-case:
+AllowTcpForwarding yes
+GatewayPorts clientspecified
+
+# (Optional) Restrict to your username:
+AllowUsers tunnel
+