# /etc/ssh/sshd_config.d/my.conf
PermitRootLogin prohibit-password
AllowGroups sudo root
PasswordAuthentication no