--- __sshd_service: ssh __sshd_packages: - openssh-server __sshd_config_mode: "0644" __sshd_defaults: Port: 22 Protocol: 2 HostKey: - /etc/ssh/ssh_host_rsa_key - /etc/ssh/ssh_host_dsa_key - /etc/ssh/ssh_host_ecdsa_key UsePrivilegeSeparation: true KeyRegenerationInterval: 3600 ServerKeyBits: 768 SyslogFacility: AUTH LogLevel: INFO LoginGraceTime: 120 PermitRootLogin: true StrictModes: true RSAAuthentication: true PubkeyAuthentication: true IgnoreRhosts: true RhostsRSAAuthentication: false HostbasedAuthentication: false PermitEmptyPasswords: false ChallengeResponseAuthentication: false X11Forwarding: true X11DisplayOffset: 10 PrintMotd: false PrintLastLog: true TCPKeepAlive: true AcceptEnv: LANG LC_* Subsystem: "sftp {{ __sshd_sftp_server }}" UsePAM: true __sshd_os_supported: true __sshd_runtime_directory: /run/sshd