-Subproject commit 88674af9adc5adaa66abbef421bf0af867c234ff
+Subproject commit 35fa89f7261e3909983444c32241a9b14d033122
-Subproject commit 7ee617f7325510f41615447920cede39007f304e
+Subproject commit 70698eb4df8b546882e8aaeaea40c8d12e01279d
--- /dev/null
+.../..../etc/gnupg
\ No newline at end of file
--- /dev/null
+../...
\ No newline at end of file
--- /dev/null
+.../lib/tool/admin/etc/ssh/install
\ No newline at end of file
--- /dev/null
+.../sec/etc/ssh/moduli
\ No newline at end of file
--- /dev/null
+# DOC: https://stribika.github.io/2015/01/04/secure-secure-shell.html
+Host *
+ #Compression yes
+ #CompressionLevel 9
+ Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+ ControlMaster auto
+ ControlPath ~/.ssh/%h-%p-%r.sock
+ GSSAPIAuthentication no
+ GSSAPIDelegateCredentials no
+ HashKnownHosts yes
+ IdentityFile ~/.ssh/id_dsa
+ IdentityFile ~/.ssh/id_rsa
+ IdentityFile ~/.ssh/identity
+ KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
+ MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com
+ SendEnv LANG LC_*
+ StrictHostKeyChecking ask
+ UserKnownHostsFile ~/.ssh/known_hosts
+
+# vim: ft=sshconfig
--- /dev/null
+.../sec/etc/ssh/ssh_host_rsa_key.gpg
\ No newline at end of file
--- /dev/null
+.../sec/etc/ssh/ssh_host_rsa_key.pub
\ No newline at end of file
--- /dev/null
+# DOC: https://stribika.github.io/2015/01/04/secure-secure-shell.html
+AcceptEnv LANG LC_*
+AuthorizedKeysFile %h/.ssh/authorized_keys
+ChallengeResponseAuthentication no
+Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+ClientAliveInterval 0
+Compression yes
+DebianBanner no
+GSSAPIAuthentication no
+#HostKey /etc/ssh/ssh_host_ed25519_key
+HostKey /etc/ssh/ssh_host_rsa_key
+HostbasedAuthentication no
+IgnoreRhosts yes
+IgnoreUserKnownHosts no
+KerberosAuthentication no
+#KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
+KeyRegenerationInterval 3600
+ListenAddress 0.0.0.0:22
+LogLevel INFO
+LoginGraceTime 120
+MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com
+MaxAuthTries 5
+PasswordAuthentication no
+PermitEmptyPasswords no
+PermitRootLogin yes
+PrintLastLog yes
+PrintMotd no
+Protocol 2
+PubkeyAuthentication yes
+RSAAuthentication yes
+RhostsRSAAuthentication no
+ServerKeyBits 768
+StrictModes yes
+SyslogFacility AUTH
+TCPKeepAlive yes
+UsePAM yes
+UsePrivilegeSeparation yes
+X11DisplayOffset 10
+X11Forwarding no
+
+Subsystem sftp internal-sftp
+Match Group sftp
+ AllowTCPForwarding no
+ ChrootDirectory %h
+ ForceCommand internal-sftp
+ X11Forwarding no
+
+# vim: ft=sshdconfig
--- /dev/null
+..../sec/srv/ateliers
\ No newline at end of file