Lesson learned: do not put a Forgejo instance behind Cloudflare proxy. It breaks SSH over git, and also causes some weird session-related issues