Comments

• IMO sshd_config is pretty sane by default. All I need to change is: HostKey /etc/ssh/ssh_host_ed25519_keyKbdInteractiveAuthentication noPasswordAuthentication no I don't really care about port scanners anyway because modern cryptography keeps them away. But if you do, check out endlessh.

  in Policies regarding access to your ssh port? Comment by __no_preserve_root April 2022