Port {{ ssh_port }} PermitRootLogin no PubkeyAuthentication yes PasswordAuthentication no KbdInteractiveAuthentication no X11Forwarding no