Port                            22
Protocol                        2
HostKey                         /etc/ssh/ssh_host_rsa_key
HostKey                         /etc/ssh/ssh_host_dsa_key
UsePrivilegeSeparation          yes

SyslogFacility                  AUTH
LogLevel                        INFO

LoginGraceTime                  120
StrictModes                     yes

RSAAuthentication               yes
PubkeyAuthentication            yes

IgnoreRhosts                    yes
HostbasedAuthentication         no
PermitEmptyPasswords            no
KerberosAuthentication          no
GSSAPIAuthentication            no

<%- if govuk_platform == "development" -%>
PasswordAuthentication          yes
PermitRootLogin                 yes
X11Forwarding                   yes
X11DisplayOffset                10
ChallengeResponseAuthentication yes
<%- else -%>
PasswordAuthentication          no
PermitRootLogin                 no
X11Forwarding                   no
ChallengeResponseAuthentication no
<%- end -%>

<%- if @govuk_class == "jumpbox" -%>
AllowUsers <%= ssh_allow_users %>
<%- end -%>

PrintMotd                       yes
PrintLastLog                    yes
TCPKeepAlive                    yes

AcceptEnv                       LANG LC_*

Subsystem     sftp              /usr/lib/openssh/sftp-server

UsePAM                          yes

Port                            22
Protocol                        2
HostKey                         /etc/ssh/ssh_host_rsa_key
HostKey                         /etc/ssh/ssh_host_dsa_key
UsePrivilegeSeparation          yes

SyslogFacility                  AUTH
LogLevel                        INFO

LoginGraceTime                  120
StrictModes                     yes

RSAAuthentication               yes
PubkeyAuthentication            yes

IgnoreRhosts                    yes
HostbasedAuthentication         no
PermitEmptyPasswords            no
KerberosAuthentication          no
GSSAPIAuthentication            no

<%- if govuk_platform == "development" -%>
PasswordAuthentication          yes
PermitRootLogin                 yes
X11Forwarding                   yes
X11DisplayOffset                10
ChallengeResponseAuthentication yes
<%- else -%>
PasswordAuthentication          no
PermitRootLogin                 no
X11Forwarding                   no
ChallengeResponseAuthentication no
<%- end -%>

<%- if @govuk_class == "jumpbox" -%>
AllowUsers <%= ssh_allow_users %>
<%- end -%>

PrintMotd                       no
PrintLastLog                    yes
TCPKeepAlive                    yes

AcceptEnv                       LANG LC_*

Subsystem     sftp              /usr/lib/openssh/sftp-server

UsePAM                          yes

Revert "Turn on the motd in SSH"
Revert "Turn on the motd in SSH"

This reverts commit 904e910025a1e8d5ca8d783573351fc5e6c77818.
