#
# {{ ansible_managed }}
#

Port 22
ListenAddress ::
ListenAddress 0.0.0.0

Protocol 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
UsePrivilegeSeparation yes

KeyRegenerationInterval 3600
ServerKeyBits 1024

SyslogFacility AUTH
LogLevel INFO

UsePAM yes
LoginGraceTime 120
StrictModes yes

PermitRootLogin no
PermitEmptyPasswords no

PasswordAuthentication no
RSAAuthentication yes
PubkeyAuthentication yes
ChallengeResponseAuthentication no

IgnoreRhosts yes
RhostsRSAAuthentication no
HostbasedAuthentication no

X11Forwarding no
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes

AcceptEnv LANG LC_*

Subsystem sftp /usr/lib/openssh/sftp-server

AllowGroups allow-ssh
