c8h4/nixos-config
1
0
Fork 0
Code Issues Actions Activity

machines: back: add restricted backup user

Browse source 
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
This commit is contained in:
Christoph Heiss 2023-12-28 14:54:02 +01:00
parent b5fc45aacc
commit a964cac3d5
Signed by: c8h4
GPG key ID: 73D5E7FDEE3DE49A
1 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
machines/back.nix
View file

@ -101,4 +101,18 @@
device = "/dev/md0";
fsType = "vfat";
};
users.users.backup = {
isNormalUser = true;
uid = 2000;
createHome = false;
openssh.authorizedKeys.keys = let
restrictCmd =
''command="${pkgs.rrsync}/bin/rrsync -wo -no-del /tank/",restrict'';
in [
"${restrictCmd} ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAO9LOBcl04ddGijyDSuUXH47Qt6TZISUDwDr1wrm+Ou tank.c8h4.io"
];
};
services.openssh.settings.AllowUsers = [ "backup" ];
}