Port 22
Port 23
AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::

PermitRootLogin prohibit-password

PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys

HostbasedAuthentication no

PasswordAuthentication no
PermitEmptyPasswords no

KbdInteractiveAuthentication no
ChallengeResponseAuthentication no
GSSAPIAuthentication no

PrintMotd yes
PrintLastLog yes
TCPKeepAlive yes
ClientAliveInterval 10
ClientAliveCountMax 3
VersionAddendum none
Banner none

Subsystem sftp internal-sftp

#Match Group administrators
#    AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys

# configure pwsh as default shell (run command in pwsh as admin):
# New-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name DefaultShell -Value "$(Get-Command pwsh | Convert-Path)" -PropertyType String -Force