---
ssh:
  enabled: true
  pkgs:
    - 'openssh-server'
    - 'openssh-client'
  sshd_config:
    LoginGraceTime: 60
    PermitRootLogin: 'no'
    MaxAuthTries: 3
    AddressFamily: any
    PasswordAuthentication: 'no'
    VersionAddendum: none
    Subsystem: sftp /usr/lib/openssh/sftp-server
    AllowGroups: admin
    X11Forwarding: 'yes'
  ssh_config:
    '*':
      ServerAliveInterval: 120
      TCPKeepAlive: 'yes'
      AddKeysToAgent: 'yes'