1 files changed, 22 insertions, 0 deletions
diff --git a/roles/sshd/templates/sshd_config.j2 b/roles/sshd/templates/sshd_config.j2
new file mode 100644
index 0000000..534ea39
--- /dev/null
+++ b/roles/sshd/templates/sshd_config.j2
@@ -0,0 +1,22 @@
+# managed by Ansible
+
+# security
+PermitRootLogin yes
+MaxAuthTries 6
+MaxSessions 10
+
+# auth
+AuthorizedKeysFile .ssh/authorized_keys
+PasswordAuthentication no
+PermitEmptyPasswords no
+ClientAliveInterval 180
+
+{% if ansible_facts["os_family"] == "Debian" %}
+Subsystem sftp /usr/lib/openssh/sftp-server
+ChallengeResponseAuthentication no
+UsePAM yes
+PrintMotd no
+UsePrivilegeSeparation sandbox
+{% else %}
+Subsystem sftp /usr/libexec/sftp-server
+{% endif %}