#Mettre un port autre, c'est toujours mieux
Port 22
Protocol 2
Ciphers aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com

PermitRootLogin no
StrictModes yes
UsePrivilegeSeparation sandbox

PasswordAuthentication no
ChallengeResponseAuthentication no
PubkeyAuthentication yes
UsePAM yes

PermitEmptyPasswords no
MaxAuthTries 6
LoginGraceTime 30

AllowUsers machin

X11Forwarding no

PrintLastLog yes
PrintMotd no

AcceptEnv LANG LC_*

Subsystem sftp /usr/lib/openssh/sftp-server