1/3 2FA with Google Authenticator

add your SSH keys to the host

creating ed25519 SSH keys

configure sshd

sudo vim /etc/pam.d/sshd


2     auth required pam_google_authenticator.so
...
5     # @include common-auth

sudo vim /etc/ssh/sshd_config

37    PubkeyAuthentication yes
...
56    PasswordAuthentication no
...
61    ChallengeResponseAuthentication yes
...
84    UsePAM yes
...
123    Match User USERNAME
124        AuthenticationMethods publickey,keyboard-interactive

restart sshd service

sudo systemctl restart sshd.service