distgit: start working on moving dist-git to use git@ for ssh

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>

inventory/group_vars/pkgs_stg

@@ -11,6 +11,9 @@ wsgi_threads: 4
 
 pagure_static_uid: 600
 
+# Configures ssh for git@ user
+sshd_keyhelper: true
+
 # We have both celery (pagure_worker) and web thread wanting to send out fedmsg's.
 # To make things easy on the listening side (so avoid contention of binding ports), let's set the pkgs boxes to active fedmsg.
 fedmsg_active: True

roles/basessh/templates/sshd_config

@@ -51,7 +51,8 @@ AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
 AcceptEnv XMODIFIERS
 
 {% if sshd_keyhelper %}
-# For repospanner/git
+# For git
+Match User git
    AuthorizedKeysCommandUser git
    AuthorizedKeysCommand /usr/libexec/pagure/keyhelper.py "%u" "%h" "%t" "%f"
 {% elif env == 'staging' and not sshd_keyhelper %}