# SSH Hardening Configuration
# Deploy by appending to: /etc/ssh/sshd_config
# 
# Setup commands:
#   sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.backup
#   sudo cat config/ssh/sshd_config_hardening >> /etc/ssh/sshd_config
#   sudo sshd -t
#   sudo systemctl restart sshd

# Enhanced security settings
ClientAliveInterval 300
ClientAliveCountMax 2
Compression no
LogLevel VERBOSE
MaxSessions 3
TCPKeepAlive no
X11Forwarding no
AllowAgentForwarding no
AllowTcpForwarding no
GatewayPorts no
PermitTunnel no
Banner /etc/ssh/banner