[SECURITY] Harden SSH across all servers #37

Open
opened 2026-04-10 21:48:44 -05:00 by blakeridgway · 0 comments
Owner

Description

Harden SSH configuration across all servers (srv01, srv02, nvr) and jails:

  • Disable password authentication

  • Enforce key-only authentication

  • Disable root login

  • Install and configure sshguard (FreeBSD) or fail2ban (Linux/Debian)

  • Restrict SSH to specific users/groups

Severity

High

Affected Services

SSH access on all servers.

Steps to Reproduce

No response

Suggested Mitigation

No response

### Description Harden SSH configuration across all servers (srv01, srv02, nvr) and jails: - Disable password authentication - Enforce key-only authentication - Disable root login - Install and configure sshguard (FreeBSD) or fail2ban (Linux/Debian) - Restrict SSH to specific users/groups ### Severity High ### Affected Services SSH access on all servers. ### Steps to Reproduce _No response_ ### Suggested Mitigation _No response_
blakeridgway added the
security
label 2026-04-10 21:48:44 -05:00
Sign in to join this conversation.
No description provided.