{ ... }: { imports = [ ../../services/openssh.nix ]; services.openssh = { settings.PerSourcePenalties = false; extraConfig = '' Match User forgejo AcceptEnv GIT_PROTOCOL ''; }; }