# {{ ansible_managed }}

Port {{ openssh_port }}

PermitRootLogin no

ChallengeResponseAuthentication no

UsePAM yes

X11Forwarding yes

PrintMotd no

AcceptEnv LANG LC_*

Subsystem	sftp	internal-sftp

Match Group {{ backup_group }}
  X11Forwarding no
  AllowTcpForwarding no
  AllowAgentForwarding no
  PermitTTY no
  ForceCommand rrsync -ro {{ backup_chroot_dir | quote }}