Nulo/forgejo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
forgejo/docker/root/etc/templates/sshd_config

34 lines
594 B
Text
Raw Normal View History

Fix #8453 by making openssh listen on SSH_LISTEN_PORT not SSH_PORT (#8477)
2019-10-12 15:45:00 +00:00
Port ${SSH_LISTEN_PORT}
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de>
2016-11-28 13:13:18 +00:00
Protocol 2
New approach to Gogs Docker Container - VOLUME for ‘/data’ - Usage of S6 as PID 1 Process - Usage of ‘socat’ so linked container (like databases) are binded to localhost - OpenSSH, Socat Link and Gogs are supervised using S6 - Size of container reduced to ~75Mo
2015-10-02 09:56:36 +00:00
AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de>
2016-11-28 13:13:18 +00:00
New approach to Gogs Docker Container - VOLUME for ‘/data’ - Usage of S6 as PID 1 Process - Usage of ‘socat’ so linked container (like databases) are binded to localhost - OpenSSH, Socat Link and Gogs are supervised using S6 - Size of container reduced to ~75Mo
2015-10-02 09:56:36 +00:00
LogLevel INFO
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de>
2016-11-28 13:13:18 +00:00
HostKey /data/ssh/ssh_host_ed25519_key
New approach to Gogs Docker Container - VOLUME for ‘/data’ - Usage of S6 as PID 1 Process - Usage of ‘socat’ so linked container (like databases) are binded to localhost - OpenSSH, Socat Link and Gogs are supervised using S6 - Size of container reduced to ~75Mo
2015-10-02 09:56:36 +00:00
HostKey /data/ssh/ssh_host_rsa_key
HostKey /data/ssh/ssh_host_dsa_key
HostKey /data/ssh/ssh_host_ecdsa_key
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de>
2016-11-28 13:13:18 +00:00
AuthorizedKeysFile .ssh/authorized_keys
UseDNS no
AllowAgentForwarding no
AllowTcpForwarding no
PrintMotd no
PermitUserEnvironment yes
New approach to Gogs Docker Container - VOLUME for ‘/data’ - Usage of S6 as PID 1 Process - Usage of ‘socat’ so linked container (like databases) are binded to localhost - OpenSSH, Socat Link and Gogs are supervised using S6 - Size of container reduced to ~75Mo
2015-10-02 09:56:36 +00:00
PermitRootLogin no
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de>
2016-11-28 13:13:18 +00:00
ChallengeResponseAuthentication no
New approach to Gogs Docker Container - VOLUME for ‘/data’ - Usage of S6 as PID 1 Process - Usage of ‘socat’ so linked container (like databases) are binded to localhost - OpenSSH, Socat Link and Gogs are supervised using S6 - Size of container reduced to ~75Mo
2015-10-02 09:56:36 +00:00
PasswordAuthentication no
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de>
2016-11-28 13:13:18 +00:00
PermitEmptyPasswords no
Make AllowedUsers configurable in sshd_config (#8094) docker/root/usr/bin/entrypoint already allows for the specification of USER, USER_UID, USER_GID. But since AllowedUsers is hardcoded in sshd_config, one cannot log in as a user different ftom git. This change substitutes ${USER} for git in the sshd_config template. Signed-off-by: Jeronimo Pellegrini <j_p@aleph0.info>
2019-09-05 20:20:55 +00:00
AllowUsers ${USER}
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de>
2016-11-28 13:13:18 +00:00
Banner none
Subsystem sftp /usr/lib/ssh/sftp-server
add git protocol v2 support via SSH on Docker image (#5520) * add git protocol v2 support via SSH on Docker image * remove new layer on dockerfile
2018-12-11 17:20:04 +00:00
Fix #8453 by making openssh listen on SSH_LISTEN_PORT not SSH_PORT (#8477)
2019-10-12 15:45:00 +00:00
AcceptEnv GIT_PROTOCOL
Reference in a new issue Copy permalink