target_user => 'staticsync',
command => "/usr/local/bin/staticsync-ssh-wrap ${::fqdn}",
key => $facts['staticsync_key'],
- restrict => 'no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-user-rc',
+ restrict => 'restrict,pty',
collect_tag => $add_tag,
}
ssh::authorized_key_collect { 'staticsync':