#LogLevel VERBOSE
Protocol 2
PrintMotd no

UseDNS no
TCPKeepAlive no

Compression no
IgnoreRhosts yes

AllowAgentForwarding no
AllowTcpForwarding no
AllowStreamLocalForwarding no
DisableForwarding yes

PermitTunnel no

X11Forwarding no

AuthenticationMethods publickey
PasswordAuthentication no
UsePAM yes
ChallengeResponseAuthentication no
MaxAuthTries 6
PermitEmptyPasswords no
PermitRootLogin no

Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com
HostKeyAlgorithms rsa-sha2-512,rsa-sha2-256,ssh-ed25519
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com

HostKey /etc/ssh/ssh_host_ed25519_key
KexAlgorithms sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512

ClientAliveCountMax 3
ClientAliveInterval 500
PermitUserEnvironment no

MaxSessions 3

Subsystem sftp internal-sftp