<commit_before># Package generated configuration file
# See the sshd_config(5) manpage for details

# What ports, IPs and protocols we listen for
Port <%= @port %>
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
<% @host_keys.each do |key| -%>
HostKey <%= key %>
<% end -%>
#Privilege Separation is turned on for security
UsePrivilegeSeparation yes

# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768

# Logging
SyslogFacility AUTH
LogLevel INFO

# Authentication:
LoginGraceTime 120
PermitRootLogin <%= @permit_root_login %>
StrictModes yes

RSAAuthentication yes
PubkeyAuthentication <%= @pubkey_authentication %>
AuthorizedKeysFile	%h/.ssh/authorized_keys

# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
#IgnoreUserKnownHosts yes

# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords no

# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no

# Change to no to disable tunnelled clear text passwords
PasswordAuthentication <%= @password_authentication %>

# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes

# GSSAPI options
GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

X11Forwarding <%= @x11_forwarding %>
X11DisplayOffset 10
PrintMotd <%= @print_motd %>
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
UseDNS <%= @use_dns %>

#MaxStartups 10:30:60
<% if @banner -%>
Banner <%= @banner %>
<% end -%>

<% if @client_alive_interval -%>
ClientAliveInterval <%= @client_alive_interval %>
<% end -%>
<% if @client_alive_count_max -%>
ClientAliveCountMax <%= @client_alive_count_max %>
<% end -%>

<% if @ciphers -%>
Ciphers <%= @ciphers.join(",") %>
<% end -%>

# Allow setting environment variables
AcceptEnv <%= @accept_env %>

#Subsystem sftp /usr/lib/openssh/sftp-server
Subsystem sftp <%= @subsystem_sftp %>
UsePAM <%= @use_pam %>

<% if @allowed_users.any? %>
AllowUsers <%= @allowed_users.join(" ") %>
<% end %>
<% if @allowed_groups.any? -%>
AllowGroups <%= @allowed_groups.join(" ") %>
<% end -%>


<% if @password_authentication_groups.any? -%>
<% @password_authentication_groups.each do |val| -%>
Match Group <%= val %>
    PasswordAuthentication yes
<% end -%>
<% end -%>

<% if @password_authentication_users.any? -%>
<% @password_authentication_users.each do |val| -%>
Match User <%= val %>
    PasswordAuthentication yes<commit_msg>Make sure @ciphers isn't an empty array<commit_after># Package generated configuration file
# See the sshd_config(5) manpage for details

# What ports, IPs and protocols we listen for
Port <%= @port %>
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
<% @host_keys.each do |key| -%>
HostKey <%= key %>
<% end -%>
#Privilege Separation is turned on for security
UsePrivilegeSeparation yes

# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768

# Logging
SyslogFacility AUTH
LogLevel INFO

# Authentication:
LoginGraceTime 120
PermitRootLogin <%= @permit_root_login %>
StrictModes yes

RSAAuthentication yes
PubkeyAuthentication <%= @pubkey_authentication %>
AuthorizedKeysFile	%h/.ssh/authorized_keys

# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
#IgnoreUserKnownHosts yes

# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords no

# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no

# Change to no to disable tunnelled clear text passwords
PasswordAuthentication <%= @password_authentication %>

# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes

# GSSAPI options
GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

X11Forwarding <%= @x11_forwarding %>
X11DisplayOffset 10
PrintMotd <%= @print_motd %>
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
UseDNS <%= @use_dns %>

#MaxStartups 10:30:60
<% if @banner -%>
Banner <%= @banner %>
<% end -%>

<% if @client_alive_interval -%>
ClientAliveInterval <%= @client_alive_interval %>
<% end -%>
<% if @client_alive_count_max -%>
ClientAliveCountMax <%= @client_alive_count_max %>
<% end -%>

<% if @ciphers.any? -%>
Ciphers <%= @ciphers.join(",") %>
<% end -%>

# Allow setting environment variables
AcceptEnv <%= @accept_env %>

#Subsystem sftp /usr/lib/openssh/sftp-server
Subsystem sftp <%= @subsystem_sftp %>
UsePAM <%= @use_pam %>

<% if @allowed_users.any? %>
AllowUsers <%= @allowed_users.join(" ") %>
<% end %>
<% if @allowed_groups.any? -%>
AllowGroups <%= @allowed_groups.join(" ") %>
<% end -%>


<% if @password_authentication_groups.any? -%>
<% @password_authentication_groups.each do |val| -%>
Match Group <%= val %>
    PasswordAuthentication yes
<% end -%>
<% end -%>

<% if @password_authentication_users.any? -%>
<% @password_authentication_users.each do |val| -%>
Match User <%= val %>
    PasswordAuthentication yes
{'fraction_non_alphanumeric': 0.11467174779144293, 'fraction_numerical': 0.011432530746578903, 'mean_word_length': 5.458612975391499, 'pattern_counts': {'":': 0, '<': 81, '<?xml version=': 0, '>': 81, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 2, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5078028', 'n_tokens_mistral': 2107, 'n_tokens_neox': 1838, 'n_words': 537}