gitoria

779 B

1. # Only public-key login, only as `git`, and only with a key the app knows. Everything a key may do is fixed by the forced command.
2. # (the port comes from the entrypoint: -p $GITORIA_SSH_PORT)
3. HostKey /hostkeys/ssh_host_ed25519_key
4. HostKey /hostkeys/ssh_host_rsa_key
5. AllowUsers git
6. # `git` may have uid 0 (it takes the owner of the repo folder, see entrypoint.sh): key login only, and only with a forced command
7. PermitRootLogin forced-commands-only
8. PasswordAuthentication no
9. KbdInteractiveAuthentication no
10. PubkeyAuthentication yes
11. AuthorizedKeysFile none
12. AuthorizedKeysCommand /usr/local/bin/gitoria-keys %t %k
13. AuthorizedKeysCommandUser git
14. AllowTcpForwarding no
15. AllowAgentForwarding no
16. X11Forwarding no
17. PermitTTY no
18. PermitUserEnvironment no
19. PrintMotd no
20. UsePAM no
21. LogLevel INFO