ansible-role-system/templates/sshd-default.conf.j2

{%if sshd_port is defined             %}Port                   {{sshd_port}}{%endif%}
PermitRootLogin        {{sshd_permit_root_login}}
StrictModes            yes
PubkeyAuthentication   yes
{%if sshd_kerberos_authentication is defined%}KerberosAuthentication {{sshd_kerberos_authentication}}{%endif%}
{%if sshd_gssapi_authentication is defined%}GSSAPIAuthentication   {{sshd_gssapi_authentication}}{%endif%}
TCPKeepAlive           yes
Ciphers                {{sshd_ciphers}}
MACs                   {{sshd_macs}}
KexAlgorithms          {{sshd_kex_algorithms}}
HostKey                {%for k in sshd_host_keys%}{{k}}{%endfor%}