diff --git a/roles/aurweb/templates/aurweb_config.j2 b/roles/aurweb/templates/aurweb_config.j2
index 11c29538c1b11bceb30d4d5bb1484da77887f0ec..10edb4a593cb4b9b825cb8054af739a0615e5309 100644
--- a/roles/aurweb/templates/aurweb_config.j2
+++ b/roles/aurweb/templates/aurweb_config.j2
@@ -3,3 +3,5 @@ Match User {{ aurweb_user }}
         AuthorizedKeysCommand /usr/local/bin/aurweb-git-auth.sh "%t" "%k"
         AuthorizedKeysCommandUser {{ aurweb_user }}
         AcceptEnv AUR_OVERWRITE
+        AllowTcpForwarding No
+        AllowAgentForwarding No