Clément Désiles
642a0f8ea4
sshd Banner fires on every connection (scp, sftp, non-interactive), the wrong layer for a welcome banner. Move to .zprofile, interactive login shells only.
SSH server
Enable authorized_keys fallback
When you encrypt your home data, you cannot allow hardened remote SSH connection. To make this still possible, here is the trick: a fallback authorized_key file: /etc/ssh/authorized_keys/myuser
Simply enable this setting to get this working:
ssh_authorized_keys_fallback_enabled: true
And you're set.