Port                            @ssh_port@
AddressFamily                   any
ListenAddress                   0.0.0.0
ListenAddress                   ::

HostKey                         /etc/ssh/ssh_host_ed25519_key
HostKey                         /etc/ssh/ssh_host_rsa_key

SyslogFacility                  AUTH
LogLevel                        VERBOSE

LoginGraceTime                  2m
StrictModes                     yes
MaxAuthTries                    6
MaxSessions                     256

UsePAM                          yes
PubkeyAuthentication            yes
PermitRootLogin                 without-password

PasswordAuthentication          no
PermitEmptyPasswords            no
ChallengeResponseAuthentication no

AuthorizedKeysFile	        .ssh/authorized_keys
AuthorizedPrincipalsFile        none

AuthorizedKeysCommand           none
AuthorizedKeysCommandUser       nobody


AllowTcpForwarding              yes
AllowAgentForwarding            no
GatewayPorts                    no
X11Forwarding                   no

Subsystem sftp                  /usr/lib/ssh/sftp-server

AcceptEnv                       LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv                       LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv                       LC_IDENTIFICATION LC_ALL


# pagure
Match User git
    AuthorizedKeysCommand /usr/lib/pagure/keyhelper.py "%u" "%h" "%t" "%f"
    AuthorizedKeysCommandUser git