---
sshd_service: ssh
sshd_packages:
  - openssh-server
  - openssh-blacklist
  - openssh-blacklist-extra
  - openssh-sftp-server
sshd_defaults:
  ChallengeResponseAuthentication: no
  X11Forwarding: yes
  PrintMotd: no
  AcceptEnv: LANG LC_*
  Subsystem: sftp {{ sshd_sftp_server }}
  UsePAM: yes