# Bare OS sshd — stock defaults (see man sshd_config)
# Host keys live on the writable personal drive (not under read-only /etc).

Port 2222
ListenAddress 127.0.0.1

# Writable host key (generated on first start if missing)
HostKey ~/.config/bare-os/ssh/host/ssh_host_ed25519_key

PermitRootLogin no
PasswordAuthentication yes
PubkeyAuthentication yes
PermitEmptyPasswords no
ChallengeResponseAuthentication no

AuthorizedKeysFile .ssh/authorized_keys

AllowTcpForwarding no
MaxAuthTries 6
ClientAliveInterval 60
ClientAliveCountMax 3

Subsystem sftp internal-sftp