#Port 22
Protocol 2
Ciphers aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com

PermitRootLogin no
StrictModes yes

PasswordAuthentication no
KbdInteractiveAuthentication no
PubkeyAuthentication yes
UsePAM yes

PermitEmptyPasswords no
MaxAuthTries 6
LoginGraceTime 30

AllowGroups wheel

AllowTcpForwarding no
X11Forwarding no

PrintLastLog yes
PrintMotd no

AcceptEnv LANG LC_*

Subsystem sftp /usr/lib/openssh/sftp-server