{ ... }: {
  services.openssh.extraConfig = ''
    Match User git
      ForceCommand /usr/local/bin/simple-git-ssh
  '';
}