diff --git a/hosts/git/default.nix b/hosts/git/default.nix
index 5ccac8b..0788cce 100644
--- a/hosts/git/default.nix
+++ b/hosts/git/default.nix
@@ -3,7 +3,7 @@
 {
   imports = [
     ../common.nix
-    ../../services/openssh.nix
+    ./openssh.nix
     ../../services/prometheus-node.nix
     ./forgejo.nix
     #./forgejo-runner.nix
diff --git a/hosts/git/forgejo.nix b/hosts/git/forgejo.nix
index 0235292..f48ec7f 100644
--- a/hosts/git/forgejo.nix
+++ b/hosts/git/forgejo.nix
@@ -78,12 +78,6 @@ in
       };
     };
 
-    openssh.extraConfig = ''
-      Match User forgejo
-        AcceptEnv GIT_PROTOCOL
-        PerSourcePenalties no
-    '';
-
     nginx.virtualHosts."${fqdn}" = {
       quic = true;
       kTLS = true;
diff --git a/hosts/git/openssh.nix b/hosts/git/openssh.nix
new file mode 100644
index 0000000..bc983a9
--- /dev/null
+++ b/hosts/git/openssh.nix
@@ -0,0 +1,14 @@
+{ ... }:
+
+{
+  imports = [ ../../services/openssh.nix ];
+
+  services.openssh = {
+    settings.PerSourcePenalties = false;
+    extraConfig = ''
+      Match User forgejo
+        AcceptEnv GIT_PROTOCOL
+    '';
+  };
+}
+