Port                            22
Protocol                        2
HostKey                         /etc/ssh/ssh_host_rsa_key
HostKey                         /etc/ssh/ssh_host_dsa_key
UsePrivilegeSeparation          yes

Ciphers -arcfour,arcfour128,arcfour256

SyslogFacility                  AUTH
LogLevel                        VERBOSE

LoginGraceTime                  120
StrictModes                     yes

RSAAuthentication               yes
PubkeyAuthentication            yes

IgnoreRhosts                    yes
HostbasedAuthentication         no
PermitEmptyPasswords            no
KerberosAuthentication          no
GSSAPIAuthentication            no

PermitRootLogin                 no
PasswordAuthentication          no
ChallengeResponseAuthentication no

<%- if @allow_x11_forwarding -%>
X11Forwarding                   yes
X11DisplayOffset                10
<%- else -%>
X11Forwarding                   no
<%- end -%>

<%- if @allow_users_enable -%>
AllowUsers <%= @allow_users.join(' ') %>
<%- end -%>

PrintMotd                       no
PrintLastLog                    yes
TCPKeepAlive                    no
ClientAliveInterval             30
ClientAliveCountMax             20

AcceptEnv                       LANG LC_*

Subsystem     sftp              /usr/lib/openssh/sftp-server

UsePAM                          yes

Port                            22
Protocol                        2
HostKey                         /etc/ssh/ssh_host_rsa_key
HostKey                         /etc/ssh/ssh_host_dsa_key
UsePrivilegeSeparation          yes

SyslogFacility                  AUTH
LogLevel                        VERBOSE

LoginGraceTime                  120
StrictModes                     yes

RSAAuthentication               yes
PubkeyAuthentication            yes

IgnoreRhosts                    yes
HostbasedAuthentication         no
PermitEmptyPasswords            no
KerberosAuthentication          no
GSSAPIAuthentication            no

PermitRootLogin                 no
PasswordAuthentication          no
ChallengeResponseAuthentication no

<%- if @allow_x11_forwarding -%>
X11Forwarding                   yes
X11DisplayOffset                10
<%- else -%>
X11Forwarding                   no
<%- end -%>

<%- if @allow_users_enable -%>
AllowUsers <%= @allow_users.join(' ') %>
<%- end -%>

PrintMotd                       no
PrintLastLog                    yes
TCPKeepAlive                    no
ClientAliveInterval             30
ClientAliveCountMax             20

AcceptEnv                       LANG LC_*

Subsystem     sftp              /usr/lib/openssh/sftp-server

UsePAM                          yes

Revert "Disable the use of insecure arcfour SSH ciphers"
Revert "Disable the use of insecure arcfour SSH ciphers"
