--- sshd_packages: - openssh - openssh-server sshd_sftp_server: /usr/libexec/openssh/sftp-server __sshd_defaults: HostKey: - /etc/ssh/ssh_host_rsa_key - /etc/ssh/ssh_host_ecdsa_key - /etc/ssh/ssh_host_ed25519_key SyslogFacility: AUTHPRIV AuthorizedKeysFile: .ssh/authorized_keys PasswordAuthentication: yes ChallengeResponseAuthentication: no GSSAPIAuthentication: yes GSSAPICleanupCredentials: no UsePAM: yes X11Forwarding: yes AcceptEnv: - LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES - LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT - LC_IDENTIFICATION LC_ALL LANGUAGE - XMODIFIERS Subsystem: "sftp {{ sshd_sftp_server }}" __sshd_os_supported: yes __sshd_sysconfig_supports_crypto_policy: true __sshd_hostkey_group: ssh_keys __sshd_hostkey_mode: "0640"