# Can't change SSH port

**URL:** https://forum.yunohost.org/t/cant-change-ssh-port/41100
**Category:** Support
**Tags:** ssh, lxc, french
**Created:** [December 15, 2025, 7:51pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100 "2025-12-15T19:51:21Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 7:51pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/1 "2025-12-15T19:51:21Z")

</div>

**What type of hardware are you using** : Virtual machine  
**What YunoHost version are you running** : 12.1.36 stable  
**How are you able to access your server** : The webadmin  
SSH

### Describe your issue

Bonjour,

PVE 9.1.2  
LXC Yunohost 12.1.36 stable - installé via [Proxmox VE Helper-Scripts](http://community-scripts.github.io/ProxmoxVE/scripts?id=yunohost&category=Operating+Systems)

Bonjour, j’essaye de changer le port SSH par defaut 22 par un autre (22222 par exemple).  
Ca ne fonctionne pas : lorsque je tape la commande yunohost specifique tout semble bien se passer mais le port ne change pas…

Auriez-vous une idée ? je me demande si proxmox n’interfere pas dans cette configuration mais je ne trouve rien de ce coté non plus.

Merci !

### Share relevant logs or error messages

```auto
sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep “Port”
Port 22
sushi@miniyuno:~$ sudo yunohost settings set security.ssh.ssh_port -v 22222 --debug
21 DEBUG acquiring lock…
27 DEBUG lock has been acquired
290 DEBUG loading python module yunohost.settings took 0.262s
290 DEBUG processing action ‘yunohost.settings.set’
291 DEBUG Import and parse pre-answered options
312 DEBUG initializing root ldap interface
313 DEBUG Ask unanswered question and prevalidate data

========================================

Security
========================================

SSH

1331 INFO Saving the new configuration…
1333 SUCCESS Config updated as expected
1334 DEBUG To view the log of the operation ‘Apply settings’, use the command ‘yunohost log show 20251215-194249-settings_set’
1336 DEBUG action executed in 1.046s
1336 DEBUG lock has been released
sushi@miniyuno:~$ sudo yunohost settings get security.ssh.ssh_port --debug
267 DEBUG loading python module yunohost.settings took 0.247s
268 DEBUG processing action ‘yunohost.settings.get’
289 DEBUG initializing root ldap interface
290 DEBUG action executed in 0.022s
22222
sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep “Port”
Port 22
sushi@miniyuno:~$ sudo systemctl status ssh
● ssh.service - OpenBSD Secure Shell server
Loaded: loaded (/lib/systemd/system/ssh.service; disabled; preset: enabled)
Active: active (running) since Thu 2025-12-11 19:04:21 CET; 4 days ago
TriggeredBy: ● ssh.socket
Docs: man:sshd(8)
man:sshd_config(5)
Process: 5322 ExecStartPre=/usr/sbin/sshd -t (code=exited, status=0/SUCCESS)
Main PID: 5324 (sshd)
Tasks: 1 (limit: 35863)
Memory: 10.0M
CPU: 2min 28.650s
CGroup: /system.slice/ssh.service
└─5324 “sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups”

```

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 9:55pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/2 "2025-12-15T21:55:16Z")

</div>

La commande ne semble pas aller à son terme et le pare-feu devrait être rechargé.  
Peux-tu lancer

```auto
sudo yunohost regen-conf --dry-run --with-diff

```

?

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 10:10pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/3 "2025-12-15T22:10:12Z")

</div>

tu veux dire `sudo yunohost tools regen-conf ssh --dry-run --with-diff` ?

ca me donne :

```auto
sushi@miniyuno:~$ sudo yunohost tools regen-conf ssh --dry-run --with-diff
Warning: The configuration file ‘/etc/ssh/sshd_config’ has been manually modified and will not be updated
ssh:
applied:
pending:
/etc/ssh/sshd_config:
diff: @@ -4,7 +4,7 @@
Protocol 2

PLEASE: if you wish to change the ssh port properly in YunoHost, use this command:

yunohost settings set security.ssh.ssh_port -v 

-Port 22
+Port 22222

ListenAddress ::
ListenAddress 0.0.0.0
@@ -107,3 +107,4 @@

If the server is a VPS, it’s expected that the owner of the

server has access to a web console through which to log in.

Match Address 192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,169.254.0.0/16,fe80::/10,fd00::/8

PermitRootLogin yes
status: modified
sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep "Port"
Port 22

```

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 10:15pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/4 "2025-12-15T22:15:28Z")

</div>

> [@Sushi](#):
>
> sudo yunohost tools regen-conf ssh

Oui. Tu peux le lancer avec `--force`, cela peut suffire. Il faudrait peut-être aussi voir si cela renvoie qqch pour nftables et fail2ban.

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 10:35pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/5 "2025-12-15T22:35:21Z")

</div>

tu veux dire :

```auto
sushi@miniyuno:~$ sudo yunohost tools regen-conf ssh --dry-run --with-diff --force
[sudo] password for sushi:
Success! The configuration would have been updated for category ‘ssh’
ssh:
applied:
/etc/ssh/sshd_config:
diff: @@ -4,7 +4,7 @@
Protocol 2

PLEASE: if you wish to change the ssh port properly in YunoHost, use this command:

yunohost settings set security.ssh.ssh_port -v 

-Port 22
+Port 22222

ListenAddress ::
ListenAddress 0.0.0.0
@@ -107,3 +107,4 @@

If the server is a VPS, it’s expected that the owner of the

server has access to a web console through which to log in.

Match Address 192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,169.254.0.0/16,fe80::/10,fd00::/8

PermitRootLogin yes
status: force-updated
pending:
sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep “Port”
Port 22
sushi@miniyuno:~$ sudo yunohost settings set security.ssh.ssh_port -v 22222 --debug
21 DEBUG acquiring lock…
27 DEBUG lock has been acquired
266 DEBUG loading python module yunohost.settings took 0.238s
266 DEBUG processing action ‘yunohost.settings.set’
267 DEBUG Import and parse pre-answered options
288 DEBUG initializing root ldap interface
289 DEBUG Ask unanswered question and prevalidate data

========================================

Security
========================================

SSH

1307 INFO Saving the new configuration…
1309 SUCCESS Config updated as expected
1310 DEBUG To view the log of the operation ‘Apply settings’, use the command ‘yunohost log show 20251215-223412-settings_set’
1312 DEBUG action executed in 1.046s
1312 DEBUG lock has been released
sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep “Port”
Port 22
sushi@miniyuno:~$

```

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 10:37pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/6 "2025-12-15T22:37:05Z")

</div>

Simplement `sudo yunohost tools regen-conf ssh --force`

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 10:39pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/7 "2025-12-15T22:39:05Z")

</div>

cela me donne :

`sushi@miniyuno:~$ sudo yunohost tools regen-conf ssh --force`  
`Success! Configuration updated for ‘ssh’`  
`ssh:`  
`applied:`  
`/etc/ssh/sshd_config:`  
`status: force-updated`  
`pending:`  
`sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep “Port”`  
`Port 22222`  
`sushi@miniyuno:~$`

Mais dans mon terminal j’accede toujours via le port 22 en SSH

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 10:40pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/8 "2025-12-15T22:40:01Z")

</div>

Car le pare-feu n’a pas été rechargé. `yunohost firewall reload`  
Lance `sudo yunohost tools regen-conf nftables fail2ban` et regarde si cela renvoie qqch.  
Essaie aussi `systemctl restart yunohost-api`, je pense que cela doit recharger -entre autres- le parefeu.

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 10:42pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/9 "2025-12-15T22:42:27Z")

</div>

Je ne sais pas comment le recharger ! 😬

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 10:44pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/10 "2025-12-15T22:44:25Z")

</div>

```auto
sudo yunohost firewall reload

```

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 10:48pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/11 "2025-12-15T22:48:18Z")

</div>

merci !

via l’interface web je peux voir qu’aucune regle n’a ete ajoutée pour le port 22222

et j’ai toujours :

`ssh: connect to host ``xxx.ynh.fr`` port 22222: Connection refused`

alors que (et ca continue à marcher via le port 22):

`sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep “Port”`  
`Port 22222`

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 10:49pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/12 "2025-12-15T22:49:47Z")

</div>

as-tu essayé :

> [@otm33](#):
>
> Lance `sudo yunohost tools regen-conf nftables fail2ban` et regarde si cela renvoie qqch.  
> Essaie aussi `systemctl restart yunohost-api`, je pense que cela doit recharger -entre autres- le parefeu.

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 10:53pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/13 "2025-12-15T22:53:05Z")

</div>

`sudo yunohost tools regen-conf nftables fail2ban` ne donne aucun message

`sudo` `systemctl restart yunohost-api` non plus

la regle du pare-feu 22222 a bien ete créée mais la connection passe toujours par le port 22 dans mon terminal

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 10:55pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/14 "2025-12-15T22:55:36Z")

</div>

Essaie de relancer `sudo yunohost settings set security.ssh.ssh_port -v 22222`: Tu devrais avoir plusieurs messages SUCCESS

```auto
Success! Configuration updated for 'ssh'
Success! Configuration updated for 'fail2ban'
Success! Configuration updated for 'nftables'
Success! Firewall reloaded
Success! Config updated as expected

```

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 10:59pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/15 "2025-12-15T22:59:13Z")

</div>

Malheureusement qu’un seul success ! 😅

```auto
sushi@miniyuno:~$ sudo yunohost settings set security.ssh.ssh_port -v 22222

========================================

Security
========================================

SSH

Info: Saving the new configuration…
Success! Config updated as expected
sushi@miniyuno:~$ cat /etc/ssh/sshd_config | grep "Port"
Port 22222

```

Estce que proxmox pourrait interferer dans ces reglages ?

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 11:13pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/16 "2025-12-15T23:13:49Z")

</div>

> [@Sushi](#):
>
> Estce que proxmox pourrait interferer dans ces reglages ?

Je ne crois pas, non. Essaie de voir si tu peux changer le port depuis la webadmin.

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 11:21pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/17 "2025-12-15T23:21:10Z")

</div>

il est deja sur 22222 la page web des parametres

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 11:24pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/18 "2025-12-15T23:24:11Z")

</div>

Ce que je veux dire par là, c’est que tu ne pourras pas savoir si les modifications faites fonctionnent si tu n’essaies pas la commande avec un autre port. Si 22222 est déjà enregistré partout, il est normal que tu n’aies que `Success! Config updated as expected`

---

<div class="post-metadata">

### Author: ![Sushi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/sushi/32/9678_2.png) [@Sushi](https://forum.yunohost.org/u/Sushi)
#### Post date: [December 15, 2025, 11:28pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/19 "2025-12-15T23:28:38Z")

</div>

Ok, je comprends. J’ai changé le port via webadmin pour 22022, pas d’erreur en sauvegardant et le pare-feu a correctement créé la regle pour ce port.

voir [https://paste.yunohost.org/raw/lenilenuhu](https://paste.yunohost.org/raw/lenilenuhu)

Cependant toujours `port 22022: Connection refused` et par contre ca passe en 22

J’ai fait un `sudo systemctl restart yunohost-api` mais ca ne change rien

---

<div class="post-metadata">

### Author: ![otm33](https://forum.yunohost.org/user_avatar/forum.yunohost.org/otm33/32/11941_2.png) [@otm33](https://forum.yunohost.org/u/otm33)
#### Post date: [December 15, 2025, 11:33pm UTC](https://forum.yunohost.org/t/cant-change-ssh-port/41100/20 "2025-12-15T23:33:30Z")

</div>

Oui, là, c’est bizarre car j’imagine que tu as bien 22022 dans `/etc/ss/sshd_config`?  
Est-ce que `systemctl restart ssh` change qqch ?

[Next page](https://forum.yunohost.org/t/cant-change-ssh-port/41100.md?page=2)
