# Put this line in a SEPARATE authorized_keys file for the git user, e.g. # ~git/.ssh/gitctl_keys, NOT the normal ~git/.ssh/authorized_keys (gitolite # owns and regenerates that one). Point sshd at it with a Match User git + # AuthorizedKeysFile stanza. See README "SSH setup" step 2. # One line, the command= forces gitctl-helper regardless of the client's sent command. command="/usr/local/bin/gitctl-helper",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty ssh-ed25519 AAAA...REPLACE_WITH_HELPER_PUBKEY... gitctl-helper