diff --git a/roles/pagure/frontend/templates/pagure.cfg b/roles/pagure/frontend/templates/pagure.cfg
index 4fddd17e76..54e28930b8 100644
--- a/roles/pagure/frontend/templates/pagure.cfg
+++ b/roles/pagure/frontend/templates/pagure.cfg
@@ -313,4 +313,21 @@ THEME = 'pagureio'
 MIRROR_SSHKEYS_FOLDER='/srv/mirror/ssh'
 
 SSH_KEYS_USERNAME_EXPECT = "git"
-SSH_KEYS_OPTIONS = 'command="/usr/share/gitolite3/gitolite-shell %(username)s",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty'
+SSH_KEYS_OPTIONS = 'restrict,command="/usr/libexec/pagure/aclchecker.py %(username)s"'
+
+SSH_COMMAND_REPOSPANNER = ([
+    "/usr/libexec/repobridge",
+    "--extra", "username", "%(username)s",
+    "--extra", "repotype", "%(repotype)s",
+    "--extra", "project_name", "%(project_name)s",
+    "--extra", "project_user", "%(project_user)s",
+    "--extra", "project_namespace", "%(project_namespace)s",
+    "%(cmd)s",
+    "'pagure/%(repotype)s/%(reponame)s'",
+], {"REPOBRIDGE_CONFIG": "/etc/repobridge/rpms.json"})
+SSH_COMMAND_NON_REPOSPANNER = ([
+    "/usr/share/gitolite3/gitolite-shell",
+    "%(username)s",
+    "%(cmd)s",
+    "%(reponame)s",
+], {})