diff --git a/templates/sshd_config.j2 b/templates/sshd_config.j2 index 87fe8ca..6ebc8af 100644 --- a/templates/sshd_config.j2 +++ b/templates/sshd_config.j2 @@ -1,20 +1,17 @@ # Attention, do not make changes # {{ ansible_managed }} - # Networking Port {{ ssh_port }} TCPKeepAlive yes - # Key exchange #KexAlgorithms curve25519-sha256@libssh.org, # diffie-hellman-group-exchange-sha256 KexAlgorithms curve25519-sha256@libssh.org{% if use_diffie_hellman_group_exchange_sha256 %},diffie-hellman-group-exchange-sha256{% endif %} - # Server authentication Protocol 2 HostKey /etc/ssh/ssh_host_ed25519_key @@ -34,7 +31,6 @@ PubkeyAuthentication yes # and ChallengeResponseAuthentication to 'no'. UsePAM yes - # User Authentication {% if restrict_allow_users|default(True) %} AllowUsers {{ sshd_allow_users|join(' ') }} @@ -50,7 +46,6 @@ StrictModes yes {% if only_allow_ed25519 == false %}# {% endif %}PubkeyAcceptedKeyTypes ssh-ed25519-cert-v01@openssh.com,ssh-ed25519 - # Symmetric ciphers #Ciphers chacha20-poly1305@openssh.com, # aes256-gcm@openssh.com, @@ -83,5 +78,4 @@ PrintMotd no # sftp (required by ansible) Subsystem sftp /usr/lib/openssh/sftp-server - # ETC