# srv-ssh - ssh server
#
[sshd]
  # No, Yes or without-password
  permit_root_login	without-password

  # address and port
  listen_address	0.0.0.0
  port			22
  address_family	inet	# only ipv4
  hostkeys_types	rsa ecdsa ed25519

  # openssh install default is to have only some enabled
  # if you set your own list using 'ciphers' variable,
  # this is used instead of default
  #
  # if 'cipher' var is empty, then enable_all_cipher is evaluated, if
  # yes/true/1 then the output of 'ssh -Q ciphers' will be used
  #
  # set enable_all_cipher to false to disable the definition at all
  #
  enable_all_ciphers	yes
  ciphers

  # placeholder to allow custom definitions
  #
  custom_definitions
