---
logrotate_excludes:
- "/etc/logrotate.d/alternatives"
- "/etc/logrotate.d/apt"
- "/etc/logrotate.d/dpkg"
- "/etc/logrotate.d/dbconfig-common"
- "/etc/logrotate.d/btmp"
- "/etc/logrotate.d/wtmp"

sshd_password_authentication: "no"
sshd_permit_root_login: "prohibit-password"