# @path: /etc/ssh/sshd_config
# @permission: -rw-r--r-- 1 root root

# Disallow passwords
PasswordAuthentication no

# Restrict user to sftp server (no shell)
Match User publisher
    ForceCommand internal-sftp
    ChrootDirectory "{{ lizmap['root_repositories'] }}"
    PermitTunnel no
    AllowAgentForwarding no
    AllowTcpForwarding no
    X11Forwarding no