Port                            @ssh_port@

AddressFamily                   any

ListenAddress                   0.0.0.0

ListenAddress                   ::

HostKey                         /etc/ssh/ssh_host_ed25519_key

HostKey                         /etc/ssh/ssh_host_rsa_key

SyslogFacility                  AUTH

LogLevel                        VERBOSE

LoginGraceTime                  2m

StrictModes                     yes

MaxAuthTries                    6

MaxSessions                     256

UsePAM                          yes

PubkeyAuthentication            yes

PermitRootLogin                 without-password

PasswordAuthentication          no

PermitEmptyPasswords            no

ChallengeResponseAuthentication no

AuthorizedKeysFile	        .ssh/authorized_keys

AuthorizedPrincipalsFile        none

AuthorizedKeysCommand           none

AuthorizedKeysCommandUser       nobody

AllowTcpForwarding              yes

AllowAgentForwarding            no

GatewayPorts                    no

X11Forwarding                   no

Subsystem sftp                  /usr/lib/ssh/sftp-server

AcceptEnv                       LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES

AcceptEnv                       LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT

AcceptEnv                       LC_IDENTIFICATION LC_ALL

# pagure

Match User git

    AuthorizedKeysCommand /usr/lib/pagure/keyhelper.py "%u" "%h" "%t" "%f"

    AuthorizedKeysCommandUser git