# {{ ansible_managed }}

Port {{ openssh_port }}

PermitRootLogin no

ChallengeResponseAuthentication no

UsePAM yes

X11Forwarding yes

PrintMotd no

AcceptEnv LANG LC_*

Subsystem	sftp	internal-sftp

Match Group {{ backup_owner }}
  X11Forwarding no
  AllowTcpForwarding no
  ChrootDirectory {{ backup_chroot_dir }}
  ForceCommand internal-sftp