---
# default users for SSH access
sshd_default_allowed_users:
  - "root"
  - "ansible"

# don't forget to add the ssh_access group!
sshd_default_allowed_groups:
  - "root"
  - "admins"


# Enable AllowUsers and AllowGroups options
restrict_allow_users: True

# Require ed25519 key
only_allow_ed25519: true 

# Allow login with password?
sshd_password_authentication: 'no' # 'yes' or 'no'

# Allow optional cryptho methods (NOT RECOMENDED)
generate_ecdsa_too: false
use_diffie-hellman-group-exchange-sha256: false
use_aes256-ctr: false
use_hmac-sha2-512: false