# {{ ansible_managed }}
# This file is managed by Ansible. Do not edit it manually.
# This is the ssh server system-wide configuration file.
# See sshd_config(5) for more information.

Port 22
AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::

# HostKeys
HostKey /etc/ssh/ssh_host_ed25519_key
HostKey /etc/ssh/ssh_host_rsa_key

# Authentication
PermitRootLogin no
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
AuthenticationMethods publickey
MaxAuthTries 3

# SFTP
Subsystem sftp /usr/lib/openssh/sftp-server

# Security
X11Forwarding no
PermitTunnel no
AllowAgentForwarding no
AllowTcpForwarding yes
PermitOpen any
ClientAliveInterval 300
ClientAliveCountMax 2
Compression no
UseDNS no

# Logging
SyslogFacility AUTH
LogLevel VERBOSE

# Accept locale-related environment variables
AcceptEnv LANG LC_*