search

andreapollastri / cipi

Install and manage your server like a pro! With Cipi you don’t need to be a Sys Admin to deploy and manage websites and PHP applications powered by cloud VPS.
https://cipi.andreapollastri.net
1.09k stars 225 forks source link

ssh with root is still available #429

Open brtsos opened 2 years ago

brtsos commented 2 years ago

Cipi didn't disable root ssh account, so I can still connect as root user.

Alnaggar94 commented 2 years ago

I have noticed it doesn't disable the root access in some providers and works fine in others, anyway you can disable it manually by the following:

sudo nano /etc/ssh/sshd_config and change the PermitRootLogin yes to PermitRootLogin no

pyro-code01 commented 2 years ago

You dont need to disable it, just use strong long password. There is brute force protection that is built in that will block ip after 10 failed attempts anyways.