When should I use this ssh_config?
Use it to restore a missing default, confirm what shipped, or diff against your current OpenSSH config.
# This is the ssh client system-wide configuration file. See
# ssh_config(5) for more information. This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.
# Configuration data is parsed as follows:
# 1. command line options
# 2. user-specific file
# 3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.
# Site-wide defaults for some commonly used options. For a comprehensive
# list of available options, their meanings and defaults, please see the
# ssh_config(5) man page.
Host *
# ForwardAgent no
# ForwardX11 no
# ForwardX11Trusted yes
# PasswordAuthentication yes
# HostbasedAuthentication no
# GSSAPIAuthentication no
# GSSAPIDelegateCredentials no
# GSSAPIKeyExchange no
# GSSAPITrustDNS no
# BatchMode no
# CheckHostIP yes
# AddressFamily any
# ConnectTimeout 0
# StrictHostKeyChecking ask
# IdentityFile ~/.ssh/id_rsa
# IdentityFile ~/.ssh/id_dsa
# IdentityFile ~/.ssh/id_ecdsa
# IdentityFile ~/.ssh/id_ed25519
# Port 22
# Protocol 2
# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc
# MACs hmac-md5,hmac-sha1,umac-64@openssh.com
# EscapeChar ~
# Tunnel no
# TunnelDevice any:any
# PermitLocalCommand no
# VisualHostKey no
# ProxyCommand ssh -q -W %h:%p gateway.example.com
# RekeyLimit 1G 1h
SendEnv LANG LC_*
HashKnownHosts yes
GSSAPIAuthentication yes
curl https://exampleconfig.com/api/v1/config/original/f7bf238a3b0bf155c565454a9f819731?hint=ssh_config
wget -O ssh_config https://exampleconfig.com/api/v1/config/original/f7bf238a3b0bf155c565454a9f819731?hint=ssh_config
<prompt><role>DevOps agent</role><source url='https://exampleconfig.com/api/v1/config/original/f7bf238a3b0bf155c565454a9f819731?hint=ssh_config' /><config><app>OpenSSH</app><os>Debian 10 (Buster)</os><location>/etc/ssh/ssh_config</location><lines>51</lines><md5>f7bf238a3b0bf155c565454a9f819731</md5><sha256>a39fbc57dc2ef8a473f078d1f6a35f725809400df67070b8852e8ed725047df2</sha256></config></prompt>
Paste into Claude, ChatGPT, or any AI assistant.
sudo apk add openssh-server
sudo apt update && sudo apt install openssh-server
sudo yum install openssh-server
sudo apt update && sudo apt install openssh-server
When should I use this ssh_config?
Use it to restore a missing default, confirm what shipped, or diff against your current OpenSSH config.
How do I restore OpenSSH defaults?
Download the file, back up the current one in /etc/ssh/ssh_config, replace it, then reload or restart OpenSSH.
Is ssh_config safe for production?
It is the vendor default for Debian 10 (Buster). Treat it as a baseline and review security and performance settings before production use.
How does this differ from other OS versions?
Defaults vary by distro and version. This copy matches Debian 10 (Buster).
Can I use this for OpenSSH troubleshooting?
Yes. Diff it against yours to find drift, then restore only the sections you need.