guixsd-config

commit 3b7c5fe1584eb297c629749ce769da0083f6d789
parent 9ec9d39ee901570ba6690ba87643e41de2a38949
Author: Vineet Kumar <git@vineetk.net>
Date:   Thu, 14 May 2026 13:28:03 -0400

saklas: restrict git user in ssh

Diffstat:
M
epistemia/systems/saklas.scm
 | 
7
+++----

1 file changed, 3 insertions(+), 4 deletions(-)
diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm
@@ -320,10 +320,9 @@ table inet filter {
 							 ("git" ,(local-file "/data/ssh/id_ed25519.pub"))
 							 ("root" ,(local-file "/data/ssh/id_ed25519.pub"))))
 						      (extra-content "\
-                                       ListenAddress 127.0.0.1:22
-                                       ListenAddress 141.95.52.111:22
-                                       #ListenAddress 10.0.13.1:22
-                                       ")))
+Match User git
+  ChrootDirectory /data/src/bare
+  ForceCommand git-shell\n")))
 					   (service unbound-service-type
 						    (unbound-configuration
 						      (server