# This file is managed by Ansible. Do not edit manually.

# SSH port configuration - listen on both standard and custom ports
Port 22
Port 22822

# Protocol settings
Protocol 2

# Host keys
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key

# Authentication settings
PermitRootLogin yes
PasswordAuthentication no
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys

# Security settings
PermitEmptyPasswords no
ChallengeResponseAuthentication no
UsePAM yes

# Connection settings
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_*

# Performance settings
TCPKeepAlive yes
ClientAliveInterval 60
ClientAliveCountMax 3

# Login settings
LoginGraceTime 1m
MaxStartups 10:30:60

# Logging
SyslogFacility AUTH
LogLevel INFO