Port 22 PermitRootLogin prohibit-password PasswordAuthentication no PubkeyAuthentication yes AuthorizedKeysFile /git/.ssh/authorized_keys # Max 3 concurrent unauthenticated connections, drop 50% above that, hard cap at 10 MaxStartups 3:50:10 # Kill unauthenticated connections after 15 seconds LoginGraceTime 15 Subsystem sftp /usr/libexec/openssh/sftp-server