Hi all,
I have Forgejo 14.0.3 running on Cloudron and I'm unable to authenticate via SSH using public key authentication. HTTPS with a personal access token works fine, so the issue is specific to SSH.
Setup:
- Forgejo 14.0.3+gitea-1.22.0
- SSH domain: git.albiobola.nl
- SSH port: 29418 (built-in SSH server, not system SSH)
- Running on Cloudron
What I have verified:
- Port 29418 is open and reachable (confirmed with netcat)
- The SSH key is correctly stored in the PostgreSQL database (verified directly in the public_key table)
- The key fingerprint in the database matches the local key exactly
- The Forgejo user account is active
- DISABLE_SSH = false and START_SSH_SERVER = true in app.ini
- SSH_ROOT_PATH = /app/data/ssh
- The /app/data/ssh/ directory exists and is owned by the cloudron user
- Forgejo process runs as the cloudron user
The error:
ssh -T git@git.albiobola.nl -p 29418
git@git.albiobola.nl: Permission denied (publickey).
What's strange:
- No log files are being written anywhere under /app or /run/forgejo
- The [log] section in app.ini is present but empty
- The /app/data/ssh/ folder remains empty — Forgejo never writes an authorized_keys file there
- Verbose SSH output shows the key is being offered correctly and the connection reaches Forgejo's built-in SSH server (remote software version: Go)
Relevant app.ini:
[server]
DISABLE_SSH = false
START_SSH_SERVER = true
SSH_DOMAIN = git.albiobola.nl
SSH_PORT = 29418
SSH_LISTEN_HOST = 0.0.0.0
SSH_LISTEN_PORT = 29418
SSH_ROOT_PATH = /app/data/ssh
[database]
DB_TYPE = postgres
[log]
ROOT_PATH = /run/forgejo
Has anyone experienced this with the Cloudron Forgejo package? Is there any additional configuration needed to make the built-in SSH server work properly? Any help appreciated!
