diff --git a/etc/ssh/ssh_config b/etc/ssh/ssh_config
new file mode 100644
index 0000000..0c27d9f
--- /dev/null
+++ b/etc/ssh/ssh_config
@@ -0,0 +1,5 @@
+Host *
+	ControlPath		~/.ssh/%u@%l->%r@%h:%p
+	SendEnv			LANG LC_*
+	VerifyHostKeyDNS	yes
+	VisualHostKey		yes
diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config
new file mode 100644
index 0000000..2b102f3
--- /dev/null
+++ b/etc/ssh/sshd_config
@@ -0,0 +1,14 @@
+Port				22
+
+AcceptEnv			LANG LC_*
+LoginGraceTime			30
+MaxStartups			5
+PermitRootLogin			prohibit-password
+StreamLocalBindUnlink		yes
+Subsystem			sftp	/usr/libexec/sftp-server
+UsePAM				yes
+X11Forwarding			no
+
+Match Address 10.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.168.0.0/16
+  PermitRootLogin		yes
+  X11Forwarding			yes