8 lines
608 B
Plaintext
8 lines
608 B
Plaintext
# MANAGED BY FELHOM (the agent's config bundle) — R-982, operator ruling D4 (2026-10-22).
|
|
# The Proxmox host's OWN sshd — the listener the household network reaches on port 22: root logs in with a KEY only.
|
|
# The root password still works on the console (the break-glass password, `03` §8a). The operator's door
|
|
# (felhom-sshd, port 8822, /etc/felhom-sshd/sshd_config) is a separate daemon whose config includes nothing from
|
|
# here, so it is not changed. Debian's sshd_config reads this folder BEFORE its own `PermitRootLogin yes`, and for
|
|
# sshd the first value wins.
|
|
PermitRootLogin prohibit-password
|