sshd.conf

# Basics
Port 22
Protocol 2

# Keys
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
AuthorizedKeysFile %h/.ssh/authorized_keys

# Logging
SyslogFacility AUTH
LogLevel INFO

# Authentication Environment
LoginGraceTime 30
MaxStartups 5

# Restrict Access to users of 'sshable' group.
PermitRootLogin no
AllowGroups sshable

# Only allow secure key-based authentication
PubkeyAuthentication yes
UsePAM no
PermitEmptyPasswords no
PasswordAuthentication no
ChallengeResponseAuthentication no

# Daemon security
UsePrivilegeSeparation yes
StrictMode yes

# Allow client to pass locale environment variables
AcceptEnv LANG LC_*

# Allow SFTP subsystem
Subsystem sftp /usr/lib/openssh/sftp-server