From 901bd1ab6ba25491f138d3eba9bfa2ed3ac82488 Mon Sep 17 00:00:00 2001
From: Jan Sydänviita <jan@sydanviita.fi>
Date: Sat, 22 Aug 2026 21:41:32 +0300
Subject: Revert to single forge user, improve

---
 roles/jails/22_forge/templates/etc_ssh_sshd_config.j2 | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

(limited to 'roles/jails/22_forge/templates/etc_ssh_sshd_config.j2')

diff --git a/roles/jails/22_forge/templates/etc_ssh_sshd_config.j2 b/roles/jails/22_forge/templates/etc_ssh_sshd_config.j2
index 11cf4a7..c99143c 100644
--- a/roles/jails/22_forge/templates/etc_ssh_sshd_config.j2
+++ b/roles/jails/22_forge/templates/etc_ssh_sshd_config.j2
@@ -8,14 +8,11 @@ HostKey /etc/ssh/ssh_host_ed25519_key
 
 PermitRootLogin no
 PubkeyAuthentication yes
-AuthorizedKeysFile /var/db/forge-config/%u/.ssh/authorized_keys
+AuthorizedKeysFile .ssh/authorized_keys
 PasswordAuthentication no
 ChallengeResponseAuthentication no
 
+AllowUsers git
+
 UseDNS no
 PrintMotd no
-
-{% for user in forge_users %}
-Match User {{ user.name }}
-    SetEnv GIT_CONFIG_GLOBAL=/var/db/forge-config/{{ user.name }}/.gitconfig
-{% endfor %}
-- 
cgit v1.3