## The configuration can be used if you simply want to use Engity's Bifröst as a drop-in-replacement
## for the regular sshd.

flows:
  - name: local
    authorization:
      type: local
      ## If PAM does not exist or is not supported, please comment the following line.
      pamService: "sshd"

    environment:
      type: local
      name: "{{.authorization.user.name}}"
      ## If you only want to allow user with group "ssh" to log in, uncomment the following lines:
      #loginAllowed: |
      #  {{ or
      #    (.authorization.user.group.name | eq "ssh" )
      #    (.authorization.user.groups     | firstMatching `{{.name | eq "ssh" }}` )
      #  }}