From 3b7c5fe1584eb297c629749ce769da0083f6d789 Mon Sep 17 00:00:00 2001 From: Vineet Kumar Date: Thu, 14 May 2026 13:28:03 -0400 Subject: saklas: restrict git user in ssh --- epistemia/systems/saklas.scm | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) (limited to 'epistemia') diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm index 059eba6..0602738 100644 --- a/epistemia/systems/saklas.scm +++ b/epistemia/systems/saklas.scm @@ -320,10 +320,9 @@ table inet filter { ("git" ,(local-file "/data/ssh/id_ed25519.pub")) ("root" ,(local-file "/data/ssh/id_ed25519.pub")))) (extra-content "\ - ListenAddress 127.0.0.1:22 - ListenAddress 141.95.52.111:22 - #ListenAddress 10.0.13.1:22 - "))) +Match User git + ChrootDirectory /data/src/bare + ForceCommand git-shell\n"))) (service unbound-service-type (unbound-configuration (server -- cgit v1.2.3