StrictModes yes

HostKey /etc/ssh/ssh_host_ed25519_key
Ciphers chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com
MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
KexAlgorithms sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256
PubkeyAcceptedAlgorithms ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com

PermitRootLogin no
# AllowUsers zatalyz
# OU
AllowGroups wheel

PasswordAuthentication no
PermitEmptyPasswords no
KbdInteractiveAuthentication no

MaxAuthTries 2
LoginGraceTime 30

PrintLastLog yes

PermitUserEnvironment no
AllowTcpForwarding no
X11Forwarding no