Forgejo and os/ssh_hardening on Debian 13

[Dan-Sun]

Hey

I am running a Forgejo instance on Debian 13 via https://code.forgejo.org/forgejo-contrib/forgejo-deb.
I recently ran the latest versions of os_hardening and ssh_hardening, and am now unable to use Forgejo. But I'm not sure it's related to the role though. Might be related to something else. I'm just hunting for a solution.

Direct connection via ssh ends up in:

PTY allocation request failed on channel 0
This account is currently not available.

and

git push:

fatal: protocol error: bad line length character: This

Thank you very much!
Dan

Edit:
I think it's related to Remove shell for linux system accounts in os_hardening.

Edit2:
Ok, that's the issue. The user forgejo needs to be in os_ignore_users, right? But it seems to be that /usr/sbin/nologin needs to be deleted manually after.

[schurzi]

Ok, that's the issue. The user forgejo needs to be in os_ignore_users, right? But it seems to be that /usr/sbin/nologin needs to be deleted manually after.

Yes, that is your issue. The thing is, this change is permanent, so even if you change the configuration of the role, this will stay like that, you need to change that back manually (or with Ansible ;)) or re-intall the forejo package, so it should change the user back to the default. (https://code.forgejo.org/forgejo-contrib/forgejo-deb/src/branch/main/deb/debian/forgejo-common.preinst)

[Dan-Sun]

Yep, I figured. re-install didn't work. But it is solved now. Thank you!