default['sshd']['sshd_config']['Protocol'] = 2
default['sshd']['sshd_config']['LogLevel'] = 'INFO'
default['sshd']['sshd_config']['X11Forwarding'] = 'no'
default['sshd']['sshd_config']['MaxAuthTries'] = 4
default['sshd']['sshd_config']['IgnoreRhosts'] = 'yes'
default['sshd']['sshd_config']['HostbasedAuthentication'] = 'no'
default['sshd']['sshd_config']['PermitRootLogin'] = 'yes'
default['sshd']['sshd_config']['PermitEmptyPasswords'] = 'no'
default['sshd']['sshd_config']['PasswordAuthentication'] = 'no'
default['sshd']['sshd_config']['Ciphers'] = value_for_platform(
  'centos' => { '< 7.0' => 'aes128-ctr,aes192-ctr,aes256-ctr' },
  'default' => 'aes256-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr'
)
default['sshd']['sshd_config']['MACs'] = value_for_platform(
  'centos' => { '< 7.0' => 'hmac-sha2-512,hmac-sha2-256' },
  'default' => 'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com'
)
default['sshd']['sshd_config']['KexAlgorithms'] = value_for_platform(
  'centos' => { '< 7.0' => 'diffie-hellman-group-exchange-sha256' },
  'default' => 'curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256'
)
default['sshd']['sshd_config']['ClientAliveInterval'] = 300
default['sshd']['sshd_config']['ClientAliveCountMax'] = 0
default['sshd']['sshd_config']['LoginGraceTime'] = 60
default['sshd']['sshd_config']['DenyUsers'] = 'nobody'
default['sshd']['sshd_config']['Banner'] = '/etc/ssh_banner'
default['sshd']['sshd_config']['GSSAPIAuthentication'] = 'no'
default['sshd']['sshd_config']['UseDNS'] = 'no'
default['sshd']['sshd_config']['UsePAM'] = 'yes'
default['sshd']['privileged_user'] = 'zed'
default['sshd']['privileged_user_uid']    = '1100'
default['sshd']['t0_privileged_user']     = 't0_admin_user'
default['sshd']['t0_privileged_user_uid'] = '1110'
default['sshd']['t1_privileged_user']     = 't1_admin_user'
default['sshd']['t0_privileged_user_uid'] = '1111'