/etc/ssh/ssh_config (1)

From RaySoft
# ------------------------------------------------------------------------------
# ssh_config
# ==========
#
# Scope     Native
# Copyright (C) 2024 by RaySoft, Zurich, Switzerland
# License   GNU General Public License (GPL) 2.0
#           https://www.gnu.org/licenses/gpl2.txt
#
# ------------------------------------------------------------------------------

# HashKnownHosts
# Indicates that ssh(1) should hash host names and addresses when they are added
# to ~/.ssh/known_hosts. These hashed names may be used normally by ssh and sshd,
# but they do not reveal identifying information should the file's contents be
# disclosed.

# Ciphers
# Specifies the ciphers allowed. Multiple ciphers must be comma-separated.
# The list of available ciphers may also be obtained using "ssh -Q 'cipher'".

# HostKeyAlgorithms
# Specifies the host key signature algorithms that the client wants to use in
# order of preference.
# The list of available signature algorithms may also be obtained using
# "ssh -Q HostKeyAlgorithms".

# KexAlgorithms
# Specifies the available KEX (Key Exchange) algorithms. Multiple algorithms
# must be comma-separated.
# The list of available key exchange algorithms may also be obtained using
# "ssh -Q 'kex'".

# MACs
# Specifies the available MAC (message authentication code) algorithms. The MAC
# algorithm is used for data integrity protection. Multiple algorithms must be
# comma-separated.
# The list of available MAC algorithms may also be obtained using "ssh -Q 'mac'".

Host 192.168.1.5 tellurium tellurium.raysoft.loc 192.168.1.6 palladium palladium.raysoft.loc
    HashKnownHosts yes
    Ciphers aes256-ctr,aes256-gcm@openssh.com
    HostKeyAlgorithms ssh-ed25519
    KexAlgorithms curve25519-sha256
    MACs hmac-sha2-256,hmac-sha2-512

Host *
    HashKnownHosts yes
    Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com
    HostKeyAlgorithms ssh-ed25519,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com
    KexAlgorithms curve25519-sha256@libssh.org,sntrup761x25519-sha512@openssh.com
    MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com

# ------------------------------------------------------------------------------