====== SSH ====== ===== sshd_config ===== After change, restart sshd unit (systemd)\\ Edit /etc/ssh/sshd_config ==== no IPv6 ==== #AddressFamily any AddressFamily inet ==== Root key only ==== PermitRootLogin prohibit-password #PermitRootLogin yes ==== Users key only ==== PubkeyAuthentication yes ... # To disable tunneled clear text passwords, change to no here! PasswordAuthentication no PermitEmptyPasswords no ==== Check ==== sudo sshd -T | grep -E '^(passwordauthentication|pubkeyauthentication)' ===== .ssh/config ===== ===== examples =====