max / makenotwork
| 1 | # Git SSH access — key-only, no interactive login |
| 2 | # Drop-in for /etc/ssh/sshd_config.d/ |
| 3 | # Security: authorized_keys command= handles per-key routing to mnw-admin git-auth. |
| 4 | # ForceCommand is NOT used — it overrides command= and strips the per-key ID. |
| 5 | Match User git |
| 6 | PasswordAuthentication no |
| 7 | PermitEmptyPasswords no |
| 8 | AllowTcpForwarding no |
| 9 | X11Forwarding no |
| 10 | PermitTTY no |
| 11 |