1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2025-01-18 08:06:16 +01:00
infrastructure/roles/dbscripts/templates/authorized_keys-group.j2
Evangelos Foutras ef3e01ce61
Use restrict key option with svn-{packages,community}
No functional change; the "restrict" key option is a shorthand for:

- no-agent-forwarding
- no-port-forwarding
- no-X11-forwarding
- no-pty
- no-user-rc

It was added in OpenSSH 7.2 (2016-02-29) as a convenient way to specify
an authorized key should have "all current and future key restrictions"
applied to it.
2021-07-09 02:04:08 +03:00

14 lines
524 B
Django/Jinja

#jinja2: lstrip_blocks: True
{% for user in arch_users | sort %}
{% for group in pubkey_groups | sort %}
{% if group in arch_users[user].groups %}
{% set keys = lookup('file', '../pubkeys/'+user+'.pub').split("\n") %}
{% for key in keys | sort %}
{% if "command" not in key -%}
command="/usr/bin/svnserve --tunnel-user={{user}} -t",restrict {{key}}
{% endif %}
{% endfor %}
{% endif %}
{% endfor %}
{% endfor %}