Protocol 2

UsePAM yes

UsePrivilegeSeparation sandbox

AddressFamily any
Port 22


ListenAddress 192.168.0.120


XAuthLocation /nix/store/bbplrcxcmfl2aggs1wj756l7zhc3awy3-xauth-1.0.10/bin/xauth


X11Forwarding no


Subsystem sftp /nix/store/vmisgqfbqywgsw9php70bbx90czr398i-openssh-7.4p1/libexec/sftp-server


PermitRootLogin prohibit-password
GatewayPorts no
PasswordAuthentication yes
ChallengeResponseAuthentication yes

PrintMotd no # handled by pam_motd

AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2 /etc/ssh/authorized_keys.d/%u

HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ed25519_key


# Allow DSA client keys for now. (These were deprecated
# in OpenSSH 7.0.)
PubkeyAcceptedKeyTypes +ssh-dss

# Re-enable DSA host keys for now.