From 07a2bc6e30523db468d89bca7b74a904f286819f Mon Sep 17 00:00:00 2001
From: MickLesk <mickey.leskowitz@gmail.com>
Date: Mon, 24 Aug 2026 08:06:49 +0200
Subject: [PATCH] gitea: fix git-over-SSH auth, group-writable home dir tripped
 sshd StrictModes

---
 install/gitea-install.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install/gitea-install.sh b/install/gitea-install.sh
index 4e0da848b..783900ae8 100644
--- a/install/gitea-install.sh
+++ b/install/gitea-install.sh
@@ -30,7 +30,10 @@ setup_deb_based() {
   chown -R gitea:gitea /var/lib/gitea/
   chmod -R 750 /var/lib/gitea/
   chown root:gitea /etc/gitea
-  chmod 770 /etc/gitea
+  # sshd's StrictModes rejects pubkey auth if authorized_keys or any parent dir up to
+  # $HOME is group-writable - 770 here silently broke git-over-SSH (falls back to
+  # password auth, which fails since the gitea user has no password).
+  chmod 750 /etc/gitea
   sudo -u gitea ln -s /var/lib/gitea/data/.ssh/ /etc/gitea/.ssh
   msg_ok "Configured Gitea"