SSH

Idle Timeout

 * To set idle timeout, change in sshd_conf:
 * ClientAliveInterval <# seconds>
 * ClientAliveCountMax <# of times repeat interval>
 * So, to set a 3 hour timeout :
 * ClientAliveInterval 3600
 * ClientAliveCountMax 3

SFTP Only
Match Group sftponly ForceCommand internal-sftp -f AUTH -l ERROR ChrootDirectory %h AllowTcpForwarding no
 * If you setup a system group SFTPONLY and assign users to it, here's what you use so that they can only SFTP in and are chrooted to their directories...
 * 1) These lines must appear at the *end* of sshd_config