---
os_configuration:
  # Enabling strict policy will lead to denied access over SSH for not allowed hosts.
  strict_ssh_policy: yes
  sshd:
    UsePAM: "yes"
    PermitRootLogin: "prohibit-password"
    AuthorizedKeysFile: "%h/.ssh/authorized_keys"
    PubkeyAuthentication: "yes"
    PasswordAuthentication: "no"
    ChallengeResponseAuthentication: "yes"
  # IP addresses uses for whitelisting by NGINX and SSHD. All others will be restricted.
  allowed_hosts:
    - 195.182.195.117
    - 159.224.193.142

---
os_configuration:
  # Enabling strict policy will lead to denied access over SSH for not allowed hosts.
  strict_ssh_policy: no
  sshd:
    UsePAM: "yes"
    PermitRootLogin: "prohibit-password"
    AuthorizedKeysFile: "%h/.ssh/authorized_keys"
    PubkeyAuthentication: "yes"
    PasswordAuthentication: "no"
    ChallengeResponseAuthentication: "yes"
  # IP addresses uses for whitelisting by NGINX and SSHD. All others will be restricted.
  allowed_hosts:
    - 195.182.195.117
    - 159.224.193.142

Disable strict SSH policy by default
[CIKit][Matrox] Disable strict SSH policy by default
