Catchup

roles/SSH/files/sshd_config

@@ -44,6 +44,9 @@ GSSAPIAuthentication no
 PermitRootLogin no
 PermitEmptyPasswords no
 
+# Allow other packages to ship snippets
+Include /etc/ssh/includes/*
+
 ## By default, only ssh-allow or ldapusers are allowed to sftp
 AllowGroups ssh sftp ldapuser
 Match Group ldapuser,sftp
@@ -58,6 +61,3 @@ Match Group wheel,ssh-allow
     X11Forwarding yes
     ForceCommand none
     ChrootDirectory none
-
-# Allow other packages to ship snippets
-Include /etc/ssh/includes/*