[ssh]
enabled  = true
port     = ssh
filter   = sshd
logpath  = /var/log/auth.log