From 44024e8e52b490e9f61f5c87a50da0dac9cf1a4f Mon Sep 17 00:00:00 2001
From: Leonardo <noreply@leoflo.me>
Date: Mon, 23 Mar 2026 18:00:48 +0100
Subject: git user

---
 components/services/openssh.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'components/services/openssh.nix')

diff --git a/components/services/openssh.nix b/components/services/openssh.nix
index 66a6499..eb52bf1 100644
--- a/components/services/openssh.nix
+++ b/components/services/openssh.nix
@@ -10,6 +10,15 @@
         PasswordAuthentication = false;
         PrintMotd = false;
       };
+
+      extraConfig = ''
+        Match user git
+          AllowTcpForwarding no
+          AllowAgentForwarding no
+          PasswordAuthentication no
+          PermitTTY no
+          X11Forwarding no
+      '';
     };
   };
 }
-- 
cgit v1.3