GitLab

sshd_config.erb: If PasswordAuthentication is disabled, also remove this method from AuthenticationMethods

ssh::config::sshd: Add parameters to selectively enable Ed25519 host keys and/or disable password authentication

Try to stick with the same method of a conditional blank line.

Comment the protocol restriction and the explicit enabling of
UsePrivilegeSeparation on Red Hat.

This should be next to the port configuration, since it's related,
and is important enough that it needs to be at the top of the file
so that it can be easily found.  It also doesn't make sense after
per-user settings.

If no ListenAddress directives are specified, then sshd will list for
incoming connections at all addresses. You can alter this by specifying
the listen_addresses parameter. For example:
listen_addresses => '192.168.1.1,192.168.2.1'

This is the (old) master branch along with the fixes to the
cron file permissions that Russ made.