[sshd]
enabled = true
port = {{ hardening_common_ssh_port }}
backend = systemd
maxretry = 4
findtime = 10m
bantime = 1h