# Git SSH access — key-only, no interactive login
# Drop-in for /etc/ssh/sshd_config.d/
# Security: authorized_keys command= handles per-key routing to mnw-admin git-auth.
# ForceCommand is NOT used — it overrides command= and strips the per-key ID.
Match User git
    PasswordAuthentication no
    PermitEmptyPasswords no
    AllowTcpForwarding no
    X11Forwarding no
    PermitTTY no
