gitea-pages/admin-guide/authentication/bastion_hosts.md

Bastions

This parameter determines whether root logins are only possible from the hosts listed in bastions. Normally the value is taken from the network property of the same name, but this parameter allows overriding the network setting through Hiera.

Use bastions

Boolean value

aaa::user_bastions: true

Bastion host definitions

A list of FQDNs. If use_bastions is true, then root logins are only allowed from the hosts on this list. Note: If the list is empty, login is unrestricted again!

  - 'wmgt01.psi.ch'
  - 'wmgt02.psi.ch'