|
|
-
- Port {{ ssh_port|default(22) }}
- ListenAddress {{ ssh_ipv4_listen|default("0.0.0.0") }}
- ListenAddress {{ ssh_ipv6_listen|default("::") }}
- HostKey /etc/ssh/ssh_host_ed25519_key
- Ciphers chacha20-poly1305@openssh.com
- MACs umac-128-etm@openssh.com
- KexAlgorithms curve25519-sha256@libssh.org
- AuthorizedKeysFile {{ ssh_authorizedkeysfile|default(".ssh/authorized_keys") }}
- UseDNS no
- SyslogFacility AUTHPRIV
- PasswordAuthentication {{ ssh_pwd_authent|default("no") }}
- ChallengeResponseAuthentication no
- GSSAPIAuthentication yes
- GSSAPICleanupCredentials no
- UsePAM yes
- UsePrivilegeSeparation sandbox
- X11Forwarding yes
- AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
- AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
- AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
- Subsystem sftp {{ sftp_path }}
|
