SSH/SSHD local LAN only

["S.D.Allen" <SDA@Deer-in-the-headlights.ca.invalid>]

Greetings;

I can seem to figure out which config file to edit and what to enter
to allow only hosts on the LAN to connect via SSH. I'll have the box
in question available to the entire Internet and want to disable
global access to SSH. Presently I'm using password authentication, and
would prefer to keep it this way, as opposed to allowing access via
trusted key.

Thanks.