<% if @os != 'OpenBSD' -%>
Include /etc/ssh/sshd_config.d/*.conf
<% end -%>

PermitRootLogin prohibit-password
PasswordAuthentication no
PermitEmptyPasswords no

<% if @os == 'OpenBSD' -%>
AuthorizedKeysFile  .ssh/authorized_keys
Subsystem	sftp	/usr/libexec/sftp-server
<% else -%>
KbdInteractiveAuthentication no
UsePAM yes
PrintMotd no
AcceptEnv LANG LC_*
X11Forwarding yes
Subsystem	sftp	/usr/lib/openssh/sftp-server
<% end -%>
