Port 22
AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::

PermitRootLogin prohibit-password

PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys

HostbasedAuthentication no

PasswordAuthentication no
PermitEmptyPasswords no

KbdInteractiveAuthentication no
ChallengeResponseAuthentication no
KerberosAuthentication no
GSSAPIAuthentication no

UsePAM yes

X11Forwarding yes
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
ClientAliveInterval 10
ClientAliveCountMax 3
VersionAddendum none
Banner none
# Debian only
DebianBanner no

Subsystem sftp internal-sftp -u 0022

Match User mm
    AllowTcpForwarding no
    ChrootDirectory /public/mm
    ForceCommand internal-sftp
    PasswordAuthentication yes
    PermitTTY no
    X11Forwarding no