default['openssh']['server']['syslog_facility'] = 'AUTHPRIV'
default['openssh']['server']['protocol'] = '2'
default['openssh']['server']['permit_root_login'] = 'no'
default['openssh']['server']['password_authentication'] = 'no'
default['openssh']['server']['challenge_response_authentication'] = 'no'
default['openssh']['server']['gssapi_authentication'] = 'no'
default['openssh']['server']['gssapi_clean_up_credentials'] = 'yes'
default['openssh']['server']['use_p_a_m'] = 'yes'
default['openssh']['server']['allow_agent_forwarding'] = 'no'
default['openssh']['server']['allow_tcp_forwarding'] = 'no'
default['openssh']['server']['x11_forwarding'] = 'yes'
default['openssh']['server']['use_d_n_s'] = 'no'

default['openssh']['server']['ignore_rhosts'] = 'yes'

default['openssh']['server']['accept_env'] = [
  'LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES',
  'LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT',
  'LC_IDENTIFICATION LC_ALL LANGUAGE',
  'XMODIFIERS'
]

default['openssh']['server']['host_key'] = [
  '/etc/ssh/ssh_host_rsa_key',
  '/etc/ssh/ssh_host_ecdsa_key'
]

# Needed to disable ipv6
default['openssh']['server']['address_family'] = 'inet'
