{
  "name": "sshd_config",
  "section": 5,
  "title": "OpenSSH sshd configuration file (Bare OS subset)",
  "synopsis": ["/etc/ssh/sshd_config"],
  "description": "Bare OS reads a subset of OpenSSH sshd_config directives from the system image. Supported keys include Port, ListenAddress, HostKey (repeatable; tilde expands to $HOME on the personal drive), PasswordAuthentication, PubkeyAuthentication, PermitRootLogin, AllowTcpForwarding, MaxAuthTries, ClientAliveInterval, AuthorizedKeysFile (relative paths resolve under $HOME), and Subsystem sftp. Unsupported lines are ignored. Strong ciphers default to bare-ssh2 stock algorithm lists.",
  "options": [],
  "keywords": ["ssh", "sshd", "config", "security"],
  "bareOsNotes": "HostKey paths must be writable; the stock config places keys under ~/.config/bare-os/ssh/host/.",
  "seeAlso": [
    { "name": "sshd", "section": 8 },
    { "name": "man", "section": 1 }
  ]
}