wenani Would it be better if we had ssh disabled on a package level but enabled on a specific website under overrides? I have users who would want it open every now and then, so disabling and enabling on a package for everyone would be tedious.
You can leave SSH disabled at the package level and add an override for specific users as needed. Here's how you can set it up:
# Edit the SSH configuration
nano /etc/ssh/sshd_config
# Add this to the bottom of the file
Match User Your_client_user
PasswordAuthentication yes
# Restart the SSH service
sudo systemctl restart ssh
# Set a password for the user
sudo passwd Your_client_user
And you're all set.