#!/bin/bash
#
# Add optional access restrictions to sshd.
#
set -e

if [ "$FAI_ACTION" != "install" ] && [ "$CONVERT" != "true" ] ; then
    exit 0
fi

cat >> ${target}/etc/ssh/sshd_config <<EOF


### Debian-LAN access restrictions (examples) ###
#AllowUsers admin

## Only allow sftp (sufficient for sshfs):
#Match Group *,!admin
#   ForceCommand internal-sftp
EOF
