Commit eeccca0

@@ -4,8 +4,7 @@ keybind = ctrl+shift+w=close_surface
 keybind = ctrl+shift+e=new_split:right
 keybind = ctrl+shift+o=new_split:down
 keybind = ctrl+shift+r=reload_config
-keybind = "ctrl+f=write_screen_file:open"
-# keybind = ctrl+scroll=increase_font_size
+keybind = ctrl+shift+f=write_scrollback_file:paste
 
 font-family = Hack Nerd Font Propo
 

@@ -20,6 +20,7 @@ bind = $mainMod SHIFT, TAB, movetoworkspace, special:temp
 #CUSTOM SCRIPTS and Commands
 bind = $mainMod,    SPACE,  exec, $menu
 bind = $mainMod,    T,      exec, $terminal
+bind = CTRLALT,    T,      exec, $terminal
 bind = $mainMod,    E,      exec, $fileManager
 bind = $mainMod,    L,      exec, hyprlock
 bind = $mainMod,    R,		exec, killall -9 waybar && waybar

@@ -8,4 +8,5 @@ $emojiMenu = rofimoji -a type copy type-numerical
 env = LIBVA_DRIVER_NAME,nvidia
 env = __GLX_VENDOR_LIBRARY_NAME,nvidia
 
-env = PATH,$PATH:$HOME/.wraith/bin
\ No newline at end of file
+env = PATH,$PATH:$HOME/.wraith/bin
+env = TERMINAL,ghostty
\ No newline at end of file

@@ -3,7 +3,7 @@ monitor=DP-1,1920x1080@144,auto,1
 # Floating windows
 windowrule = float true,center true,size 875 600,match:tag floating-window
 
-windowrule = tag +floating-window, match:class (Thunar|thunar|org.gnome.Evince|org.wraith.*|org.pulseaudio.pavucontrol|com.mitchellh.ghostty)
+windowrule = tag +floating-window, match:class (Thunar|thunar|org.gnome.Evince|org.wraith.*|org.pulseaudio.pavucontrol|com.mitchellh.ghostty|Termius|nwg-look)
 windowrule = tag +floating-window, match:class (xdg-desktop-portal-gtk), match:title ^(Open.*Files?|Open [F|f]older.*|Save.*Files?|Save.*As|Save|All Files|.*wants to [open|save].*|[C|c]hoose.*)
 
 # Popped window rounding

@@ -0,0 +1,55 @@
+Port 22
+AddressFamily any
+ListenAddress 0.0.0.0
+ListenAddress ::
+
+PermitRootLogin no
+
+LoginGraceTime 30s
+MaxAuthTries 3
+MaxSessions 10
+
+# STRICTLY Key-based authentication only
+PubkeyAuthentication yes
+AuthorizedKeysFile .ssh/authorized_keys
+
+# Disable all password-based authentication
+PasswordAuthentication no
+PermitEmptyPasswords no
+
+# Disable ChallengeResponse/KeyboardInteractive (often used for PAM passwords)
+KbdInteractiveAuthentication no
+
+# Check file permissions on user's home directory and .ssh folder
+StrictModes yes
+
+# Disable GSSAPI/Kerberos to speed up connection time (unless you use it specifically)
+GSSAPIAuthentication no
+GSSAPICleanupCredentials yes
+
+# Disable PAM unless you are using it for MFA (Google Auth, etc). 
+# If strictly using keys, 'no' is cleaner, but 'yes' is standard for session processing.
+UsePAM yes
+
+# Disable features that can be used by attackers to pivot through your server
+# Enable these only if you specifically need them.
+AllowAgentForwarding no
+AllowTcpForwarding no
+GatewayPorts no
+X11Forwarding no
+PermitTunnel no
+PermitUserEnvironment no
+
+# --- Logging & Monitoring ---
+SyslogFacility AUTH
+LogLevel VERBOSE
+
+# --- Keep Alive & Timeouts ---
+# Send a check to the client every 300 seconds (5 mins)
+ClientAliveInterval 300
+# Disconnect if client doesn't respond 3 times (Total 15 mins idle protection)
+ClientAliveCountMax 3
+
+# --- Subsystems ---
+# Secure File Transfer (SFTP)
+Subsystem sftp /usr/lib/ssh/sftp-server