- gitea_ssh_builtin: use Gitea's built-in SSH server (default false) - gitea_ssh_listen_port: SSH listen port, falls back to ssh_port - gitea_http_addr: optional HTTP bind address - grant CAP_NET_BIND_SERVICE when the built-in server uses a port < 1024 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>