diff --git a/flake.nix b/flake.nix
index 17ae332..489b306 100644
--- a/flake.nix
+++ b/flake.nix
@@ -229,6 +229,16 @@
           ./hosts/dav
         ];
       };
+      nixosConfigurations."git" = nixpkgs.lib.nixosSystem {
+        #system = "x86_64-linux";
+        #pkgs = import nixpkgs { inherit system; };
+        inherit system;
+        modules = [
+          agenix.nixosModules.default
+          { environment.systemPackages = [ (agenix.packages.${system}.default) ]; }
+          ./hosts/git
+        ];
+      };
     };
   #);
 }
diff --git a/hosts/git/default.nix b/hosts/git/default.nix
new file mode 100644
index 0000000..11598f1
--- /dev/null
+++ b/hosts/git/default.nix
@@ -0,0 +1,43 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../../services/openssh.nix
+    ../../services/prometheus-node.nix
+    ./forgejo.nix
+  ];
+
+  networking = {
+    hostName = "git";
+    firewall = {
+      allowedTCPPorts = [
+        22 # SSH
+        80 # HTTP/1
+        443 # HTTP/2
+      ];
+      allowedUDPPorts = [
+        443 # HTTP/3
+      ];
+    };
+  };
+
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn0SP19A5C8PqdH+99ki3TILozj/U4tBSQxcRRepN21 samuel@pluto"
+  ];
+
+  environment.etc."ssh/banner".text = ''
+              __
+           __/\ \__
+       __ /\_\ \ ,_\
+     /'_ `\/\ \ \ \/
+    /\ \L\ \ \ \ \ \_
+    \ \____ \ \_\ \__\
+     \/___L\ \/_/\/__/
+       /\____/
+       \_/__/
+  '';
+  services.openssh.settings.Banner = "/etc/ssh/banner";
+
+  system.stateVersion = "25.11";
+}