Secure My VPS guide doesn't contain full instructions to disable password logins
rxall opened this issue · comments
rxall commented
By default on a fresh ubuntu VPS install, Include /etc/ssh/sshd_config.d/*.conf
(L12) is included within /etc/ssh/sshd_config
.
/etc/ssh/sshd_config.d/50-cloud-init.conf
contains the setting PasswordAuthentication Yes
This overrides the setting within /etc/ssh/sshd_config
A user following the Secure My VPS guide step by step won't actually be disabling password logins where the guide would lead them to believe they have.