--- sshd_service: ssh sshd_packages: - openssh-server sshd_config_mode: "0644" __sshd_defaults: Port: 22 Protocol: 2 HostKey: - /etc/ssh/ssh_host_rsa_key - /etc/ssh/ssh_host_dsa_key - /etc/ssh/ssh_host_ecdsa_key UsePrivilegeSeparation: yes KeyRegenerationInterval: 3600 ServerKeyBits: 768 SyslogFacility: AUTH LogLevel: INFO LoginGraceTime: 120 PermitRootLogin: yes StrictModes: yes RSAAuthentication: yes PubkeyAuthentication: yes IgnoreRhosts: yes RhostsRSAAuthentication: no HostbasedAuthentication: no PermitEmptyPasswords: no ChallengeResponseAuthentication: no X11Forwarding: yes X11DisplayOffset: 10 PrintMotd: no PrintLastLog: yes TCPKeepAlive: yes AcceptEnv: LANG LC_* Subsystem: "sftp {{ sshd_sftp_server }}" UsePAM: yes __sshd_os_supported: yes __sshd_runtime_directory: /run/sshd