dtucker@openbsd.org | cac302a | 2019-02-04 02:39:42 +0000 | [diff] [blame] | 1 | # $OpenBSD: ssh_config,v 1.34 2019/02/04 02:39:42 dtucker Exp $ |
Ben Lindstrom | 36579d3 | 2001-01-29 07:39:26 +0000 | [diff] [blame] | 2 | |
Ben Lindstrom | 9721e92 | 2002-06-21 01:06:03 +0000 | [diff] [blame] | 3 | # This is the ssh client system-wide configuration file. See |
| 4 | # ssh_config(5) for more information. This file provides defaults for |
| 5 | # users, and the values can be changed in per-user configuration files |
| 6 | # or on the command line. |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 7 | |
| 8 | # Configuration data is parsed as follows: |
| 9 | # 1. command line options |
| 10 | # 2. user-specific file |
| 11 | # 3. system-wide file |
| 12 | # Any configuration value is only changed the first time it is set. |
| 13 | # Thus, host-specific definitions should be at the beginning of the |
| 14 | # configuration file, and defaults at the end. |
| 15 | |
Darren Tucker | 3f166df | 2005-02-09 09:46:47 +1100 | [diff] [blame] | 16 | # Site-wide defaults for some commonly used options. For a comprehensive |
| 17 | # list of available options, their meanings and defaults, please see the |
| 18 | # ssh_config(5) man page. |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 19 | |
| 20 | # Host * |
Damien Miller | 0bc1bd8 | 2000-11-13 22:57:25 +1100 | [diff] [blame] | 21 | # ForwardAgent no |
| 22 | # ForwardX11 no |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 23 | # PasswordAuthentication yes |
Ben Lindstrom | 5d35a2f | 2002-07-04 00:19:40 +0000 | [diff] [blame] | 24 | # HostbasedAuthentication no |
Damien Miller | 81a3892 | 2006-06-13 13:01:09 +1000 | [diff] [blame] | 25 | # GSSAPIAuthentication no |
| 26 | # GSSAPIDelegateCredentials no |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 27 | # BatchMode no |
| 28 | # CheckHostIP yes |
Damien Miller | 20a8f97 | 2003-05-18 20:50:30 +1000 | [diff] [blame] | 29 | # AddressFamily any |
Damien Miller | b78d5eb | 2003-05-16 11:39:04 +1000 | [diff] [blame] | 30 | # ConnectTimeout 0 |
Damien Miller | c497e38 | 2002-01-22 23:32:39 +1100 | [diff] [blame] | 31 | # StrictHostKeyChecking ask |
Ben Lindstrom | 9323d96 | 2001-04-04 01:58:48 +0000 | [diff] [blame] | 32 | # IdentityFile ~/.ssh/id_rsa |
Damien Miller | c497e38 | 2002-01-22 23:32:39 +1100 | [diff] [blame] | 33 | # IdentityFile ~/.ssh/id_dsa |
sobrado@openbsd.org | 9262e07 | 2016-02-20 23:02:39 +0000 | [diff] [blame] | 34 | # IdentityFile ~/.ssh/id_ecdsa |
| 35 | # IdentityFile ~/.ssh/id_ed25519 |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 36 | # Port 22 |
djm@openbsd.org | acaf34f | 2017-05-07 23:12:57 +0000 | [diff] [blame] | 37 | # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc |
| 38 | # MACs hmac-md5,hmac-sha1,umac-64@openssh.com |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 39 | # EscapeChar ~ |
Damien Miller | d27b947 | 2005-12-13 19:29:02 +1100 | [diff] [blame] | 40 | # Tunnel no |
| 41 | # TunnelDevice any:any |
| 42 | # PermitLocalCommand no |
Damien Miller | 9f6fb56 | 2008-11-03 19:15:44 +1100 | [diff] [blame] | 43 | # VisualHostKey no |
Darren Tucker | 7ad8dd2 | 2010-01-12 19:40:27 +1100 | [diff] [blame] | 44 | # ProxyCommand ssh -q -W %h:%p gateway.example.com |
Darren Tucker | c53c2af | 2013-05-16 20:28:16 +1000 | [diff] [blame] | 45 | # RekeyLimit 1G 1h |