Include /etc/ssh/sshd_config.d/*.conf
AllowGroups ssh-users
Port 22
PermitRootLogin no
PubkeyAuthentication yes
PasswordAuthentication no
# would be deprecated soon by
# KbdInteractiveAuthentication no
ChallengeResponseAuthentication no
UsePAM yes
AllowTcpForwarding yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server