==> phabricator-ssh-hook.sh <==
#!/bin/sh
###
### WARNING: This feature is new and experimental. Use it at your own risk!
###
ROOT=/var/www/phabricator/phabricator
exec "$ROOT/bin/ssh-auth" $@
==> sshd_config <==
###
### WARNING: This feature is new and experimental. Use it at your own risk!
###
# You must have OpenSSHD 6.2 or newer; support for AuthorizedKeysCommand was
# added in this version.
Port 22
AddressFamily inet
ListenAddress 109.74.196.113
AuthorizedKeysCommand /var/www/phabricator/sshd/phabricator-ssh-hook.sh
AuthorizedKeysCommandUser phabricator
AllowUsers phabricator
# You may need to tweak these options, but mostly they just turn off everything
# dangerous.
Protocol 2
PermitRootLogin no
AllowAgentForwarding no
AllowTcpForwarding no
PrintMotd no
PrintLastLog no
PasswordAuthentication no
AuthorizedKeysFile none
PidFile /var/run/sshd-phabricator.pid