Include /etc/ssh/sshd_config.d/*.conf Port 22 AllowGroups ssh-users PermitRootLogin no PubkeyAuthentication yes AuthorizedKeysFile .ssh/authorized_keys PasswordAuthentication no KbdInteractiveAuthentication no UsePAM yes AllowTcpForwarding yes X11Forwarding no AcceptEnv LANG LC_* COLORTERM Subsystem sftp /usr/lib/openssh/sftp-server