ansible-role-system/templates/sshd-default.conf.j2

{%if sshd_port is defined             %}Port                   {{sshd_port}}{%endif%}
PermitRootLogin        {{sshd_permit_root_login}}
StrictModes            yes
{%if sshd_pubkey_authentication%}PubkeyAuthentication   {{sshd_pubkey_authentication}}{%endif%}
{%if sshd_kerberos_authentication is defined%}KerberosAuthentication {{sshd_kerberos_authentication}}{%endif%}
{%if sshd_gssapi_authentication is defined%}GSSAPIAuthentication   {{sshd_gssapi_authentication}}{%endif%}
{%if sshd_password_authentication is defined%}PasswordAuthentication {{sshd_password_authentication}}{%endif%}
{%if sshd_kbdinteractive_authentication is defined%}KBDInteractiveAuthentication {{sshd_kbdinteractive_authentication}}{%endif%}
{%if sshd_hostbased_authentication is defined%}HostbasedAuthentication {{sshd_hostbased_authentication}}{%endif%}
TCPKeepAlive           yes
Ciphers                {{sshd_ciphers}}
MACs                   {{sshd_macs}}
KexAlgorithms          {{sshd_kex_algorithms}}
{%for k in sshd_host_keys%}
HostKey                {{k}}
{%endfor%}