ansible-infra/roles/common/templates/openssh/sshd_config.j2

24 lines
374 B
Django/Jinja

# {{ ansible_managed }}
Port {{ openssh_port }}
PermitRootLogin no
ChallengeResponseAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_*
Subsystem sftp internal-sftp
Match Group {{ backup_group }}
X11Forwarding no
AllowTcpForwarding no
AllowAgentForwarding no
PermitTTY no
ForceCommand rrsync -ro {{ backup_chroot_dir | quote }}