Include /etc/ssh/sshd_config.d/*.conf Port 22 PermitRootLogin yes PubkeyAuthentication yes PasswordAuthentication no KbdInteractiveAuthentication no UsePAM yes AllowAgentForwarding yes X11Forwarding no PrintMotd no PrintLastLog yes TCPKeepAlive yes ClientAliveInterval 300 ClientAliveCountMax 1 # Allow client to pass locale environment variables AcceptEnv LANG LC_* # override default of no subsystems Subsystem sftp /usr/lib/openssh/sftp-server