# Installed as /etc/ssh/sshd_config.d/10-hardening.conf. # sshd uses the first value it reads, and this file sorts before cloud-init's 50-cloud-init.conf. PermitRootLogin no PasswordAuthentication no KbdInteractiveAuthentication no AuthenticationMethods publickey AllowUsers admin deploy logpull