# /etc/ssh/sshd_config - fw.internal
ListenAddress 192.168.1.1
ListenAddress 192.168.10.1

PermitRootLogin no
AllowUsers @ADMIN_USER@
AuthenticationMethods publickey
PasswordAuthentication no
KbdInteractiveAuthentication no

MaxAuthTries 3
LoginGraceTime 30
ClientAliveInterval 300
ClientAliveCountMax 2

X11Forwarding no
AllowAgentForwarding no
AllowTcpForwarding no

Subsystem sftp /usr/libexec/sftp-server