Skip to content

Commit

Permalink
SSH Hardening round 1
Browse files Browse the repository at this point in the history
Implements parts of #11
  • Loading branch information
jgwehr committed Nov 2, 2022
1 parent ecee89d commit f916495
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,17 @@ This project aims to provide a basic set of networking tools. Docker is used as
1. Get the necessary Wireguard client https://www.wireguard.com/install/
1. Follow Wireguard's instructions. Generally speaking, you'll need a peer/client configuration from this server. Easily done on your phone via QR code. Or, on a computer, by copying a `*.conf` file from the server to the client.

### Harden SSH
*via https://linuxhandbook.com/ssh-hardening-tips/*

1. Open SSHD Config: `sudo nano /etc/ssh/sshd_config`
1. Disable empty passwords: `PermitEmptyPasswords no`
2. Change default SSH ports: `Port 2345`
5. Configure idle timeout interval: `ClientAliveInterval 300`
5. Configure idle timeout interval: `ClientAliveCountMax 2`



# General
_credit to https://github.com/willy-wagtail/raspberrypi_
## SD Card Health
Expand Down

0 comments on commit f916495

Please sign in to comment.