feat(device-edge): add isolated B2 ingress domain

2026-08-04 11:39:01 +03:00
parent b1a5a26b9a
commit 3bb5e6dc27
35 changed files with 5790 additions and 19 deletions
@@ -0,0 +1,35 @@
+Port 2222
+ListenAddress 127.0.0.1
+AddressFamily inet
+Protocol 2
+
+HostKey /run/nodedc-secrets/ssh_host_ed25519_key
+AuthorizedKeysFile /run/nodedc-secrets/authorized_keys
+StrictModes no
+
+PermitRootLogin no
+PasswordAuthentication no
+KbdInteractiveAuthentication no
+PubkeyAuthentication yes
+AuthenticationMethods publickey
+AllowUsers device-backhaul
+
+AllowTcpForwarding local
+PermitOpen 127.0.0.1:9921
+GatewayPorts no
+PermitTunnel no
+AllowAgentForwarding no
+X11Forwarding no
+PermitTTY no
+PermitUserEnvironment no
+ForceCommand /bin/false
+
+ClientAliveInterval 30
+ClientAliveCountMax 3
+LoginGraceTime 20
+MaxAuthTries 3
+MaxSessions 4
+MaxStartups 4:30:8
+UseDNS no
+PrintMotd no
+LogLevel VERBOSE