From 50f6bc35c09063e9875f9f35825d14807fe2ca7f Mon Sep 17 00:00:00 2001
From: SebastianStork <sebastian.stork@pm.me>
Date: Sat, 7 Jun 2025 15:14:37 +0200
Subject: [PATCH] Only ever use forgejo's ssh-keys for openssh

---
 modules/system/services/forgejo/ssh.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/system/services/forgejo/ssh.nix b/modules/system/services/forgejo/ssh.nix
index 77d5e0a..ef02c00 100644
--- a/modules/system/services/forgejo/ssh.nix
+++ b/modules/system/services/forgejo/ssh.nix
@@ -5,6 +5,7 @@
   config = lib.mkIf config.custom.services.forgejo.ssh.enable {
     services.openssh = {
       enable = true;
+      authorizedKeysFiles = lib.mkForce [ "${config.services.forgejo.stateDir}/.ssh/authorized_keys" ];
       settings = {
         PasswordAuthentication = false;
         KbdInteractiveAuthentication = false;