Port 22
AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::
HostKey /etc/ssh/ssh_host_ed25519_key
HostKey /etc/ssh/ssh_host_rsa_key
PubkeyAuthentication yes
AuthorizedKeysFile      .ssh/authorized_keys
PasswordAuthentication yes
KbdInteractiveAuthentication no
UsePAM yes
PrintMotd no
Subsystem       sftp    internal-sftp

Match Group user
    ChrootDirectory /sftp
    PermitTunnel no
    AllowAgentForwarding no
    AllowTCPForwarding no
    X11Forwarding no
    ForceCommand internal-sftp