8 lines
690 B
Plaintext
8 lines
690 B
Plaintext
# MANAGED BY FELHOM (the agent's config bundle) — R-982, operator ruling D4 (2026-10-22).
|
|
# The Proxmox host's OWN sshd — the listener the household network reaches on port 22: root logs in with a KEY only.
|
|
# The root password still works on the console (the break-glass password: felhom.eu runbooks/break-glass.md). The
|
|
# operator's door (felhom-sshd, port 8822, /etc/felhom-sshd/sshd_config) is a separate daemon whose config includes
|
|
# nothing from here, so it is not changed. Debian's sshd_config reads this folder BEFORE its own settings, and for
|
|
# sshd the first value wins; the bundle checks the effective value with `sshd -T` after the reload.
|
|
PermitRootLogin prohibit-password
|