# PatchBay dedicated sshd. Generated by patchbay-sshd from this template;
# values come from patchbay.conf via "patchbayd --print-config".

Port @PORT@
HostKey @HOSTKEY@
PidFile @RUNDIR@/sshd.pid
AuthorizedKeysFile @AUTHKEYS@
AllowUsers @USER@

PubkeyAuthentication yes
PasswordAuthentication no
KbdInteractiveAuthentication no
PermitRootLogin no
UsePAM no
StrictModes yes

# Clients may only open data channels to the hub port; per-key options in
# authorized_keys repeat this and force the control relay command.
AllowTcpForwarding local
PermitOpen 127.0.0.1:@HUBPORT@
AllowStreamLocalForwarding no
AllowAgentForwarding no
X11Forwarding no
PermitTunnel no
GatewayPorts no
PermitTTY no
PermitUserRC no
PermitUserEnvironment no
PrintMotd no
Banner none

# Throughput: AEAD ciphers first, no compression.
Ciphers aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr
Compression no
ClientAliveInterval 30
ClientAliveCountMax 3
MaxStartups 50:30:200
LogLevel INFO