xref: /freebsd/crypto/openssh/ssh_config (revision 535af610a4fdace6d50960c0ad9be0597eea7a1b)
1*535af610SEd Maste#	$OpenBSD: ssh_config,v 1.36 2023/08/02 23:04:38 djm Exp $
2511b41d2SMark Murray
380628bacSDag-Erling Smørgrav# This is the ssh client system-wide configuration file.  See
480628bacSDag-Erling Smørgrav# ssh_config(5) for more information.  This file provides defaults for
580628bacSDag-Erling Smørgrav# users, and the values can be changed in per-user configuration files
680628bacSDag-Erling Smørgrav# or on the command line.
7ca3176e7SBrian Feldman
8511b41d2SMark Murray# Configuration data is parsed as follows:
9511b41d2SMark Murray#  1. command line options
10511b41d2SMark Murray#  2. user-specific file
11511b41d2SMark Murray#  3. system-wide file
12511b41d2SMark Murray# Any configuration value is only changed the first time it is set.
13511b41d2SMark Murray# Thus, host-specific definitions should be at the beginning of the
14511b41d2SMark Murray# configuration file, and defaults at the end.
15511b41d2SMark Murray
16aa49c926SDag-Erling Smørgrav# Site-wide defaults for some commonly used options.  For a comprehensive
17aa49c926SDag-Erling Smørgrav# list of available options, their meanings and defaults, please see the
18aa49c926SDag-Erling Smørgrav# ssh_config(5) man page.
19511b41d2SMark Murray
20511b41d2SMark Murray# Host *
21ca3176e7SBrian Feldman#   ForwardAgent no
22ca3176e7SBrian Feldman#   ForwardX11 no
23511b41d2SMark Murray#   PasswordAuthentication yes
24f388f5efSDag-Erling Smørgrav#   HostbasedAuthentication no
25333ee039SDag-Erling Smørgrav#   GSSAPIAuthentication no
26333ee039SDag-Erling Smørgrav#   GSSAPIDelegateCredentials no
27511b41d2SMark Murray#   BatchMode no
28a9a70decSTony Finch#   CheckHostIP no
29cf2b5f3bSDag-Erling Smørgrav#   AddressFamily any
30cf2b5f3bSDag-Erling Smørgrav#   ConnectTimeout 0
31af12a3e7SDag-Erling Smørgrav#   StrictHostKeyChecking ask
32ca3176e7SBrian Feldman#   IdentityFile ~/.ssh/id_rsa
33af12a3e7SDag-Erling Smørgrav#   IdentityFile ~/.ssh/id_dsa
34acc1a9efSDag-Erling Smørgrav#   IdentityFile ~/.ssh/id_ecdsa
35acc1a9efSDag-Erling Smørgrav#   IdentityFile ~/.ssh/id_ed25519
36511b41d2SMark Murray#   Port 22
374f52dfbbSDag-Erling Smørgrav#   Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc
384f52dfbbSDag-Erling Smørgrav#   MACs hmac-md5,hmac-sha1,umac-64@openssh.com
39511b41d2SMark Murray#   EscapeChar ~
40b74df5b2SDag-Erling Smørgrav#   Tunnel no
41b74df5b2SDag-Erling Smørgrav#   TunnelDevice any:any
42b74df5b2SDag-Erling Smørgrav#   PermitLocalCommand no
43cce7d346SDag-Erling Smørgrav#   VisualHostKey no
44b15c8340SDag-Erling Smørgrav#   ProxyCommand ssh -q -W %h:%p gateway.example.com
45e4a9863fSDag-Erling Smørgrav#   RekeyLimit 1G 1h
4619261079SEd Maste#   UserKnownHostsFile ~/.ssh/known_hosts.d/%k
47