Include /etc/ssh/sshd_config.d/*.conf
AllowGroups ssh-users
Port 22
PermitRootLogin no
PubkeyAuthentication yes
PasswordAuthentication no
# deprecated alias:
# ChallengeResponseAuthentication no
KbdInteractiveAuthentication no
AuthorizedKeysFile .ssh/authorized_keys
UsePAM yes
AllowTcpForwarding yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_* COLORTERM
Subsystem sftp /usr/libexec/openssh/sftp-server