{{ ansible_managed | comment }} {% if ansible_os_family == "Ubuntu" %} Include /etc/ssh/sshd_config.d/*.conf {% endif %} AuthorizedKeysFile /etc/ssh/authorized_keys/%u PermitRootLogin no PasswordAuthentication no ChallengeResponseAuthentication no UsePAM yes AcceptEnv LANG LC_* Subsystem sftp /usr/lib/openssh/sftp-server PrintMotd no