From 069f530d30d57969a95c4ab8da46d28e5b9ef514 Mon Sep 17 00:00:00 2001
From: ver4a <ver4a@uncontrol.me>
Date: Fri, 24 Jan 2025 09:21:53 +0100
Subject: [PATCH] (ssh) Disable non public key authentication methods

---
 etc/ssh/sshd_config.d/20-disable-gssapi.conf    | 1 +
 etc/ssh/sshd_config.d/20-disable-passwords.conf | 1 +
 2 files changed, 2 insertions(+)
 create mode 100644 etc/ssh/sshd_config.d/20-disable-gssapi.conf
 create mode 100644 etc/ssh/sshd_config.d/20-disable-passwords.conf

diff --git a/etc/ssh/sshd_config.d/20-disable-gssapi.conf b/etc/ssh/sshd_config.d/20-disable-gssapi.conf
new file mode 100644
index 0000000..5efdfbb
--- /dev/null
+++ b/etc/ssh/sshd_config.d/20-disable-gssapi.conf
@@ -0,0 +1 @@
+GSSAPIAuthentication no
diff --git a/etc/ssh/sshd_config.d/20-disable-passwords.conf b/etc/ssh/sshd_config.d/20-disable-passwords.conf
new file mode 100644
index 0000000..b32dc2f
--- /dev/null
+++ b/etc/ssh/sshd_config.d/20-disable-passwords.conf
@@ -0,0 +1 @@
+PasswordAuthentication no