Sheol: remove jail and add borg for august
This commit is contained in:
parent
9d0c73b776
commit
b666e4ad13
1 changed files with 21 additions and 11 deletions
|
@ -1,28 +1,38 @@
|
||||||
{ ... }:
|
{ pkgs, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
users.users.august = {
|
users.users.august = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
createHome = false;
|
createHome = false;
|
||||||
|
packages = [ pkgs.borgbackup ];
|
||||||
};
|
};
|
||||||
services.openssh.extraConfig = ''
|
services.openssh.extraConfig = ''
|
||||||
Match User august
|
Match User august
|
||||||
AllowUsers august
|
AllowUsers august
|
||||||
PermitEmptyPasswords yes
|
PermitEmptyPasswords yes
|
||||||
ChrootDirectory /home/august
|
|
||||||
ForceCommand internal-sftp
|
|
||||||
'';
|
'';
|
||||||
sops.secrets."users/august/publicKey" = {
|
sops.secrets."users/august/publicKey" = {
|
||||||
path = "/etc/ssh/authorized_keys.d/august";
|
path = "/etc/ssh/authorized_keys.d/august";
|
||||||
mode = "444";
|
mode = "444";
|
||||||
};
|
};
|
||||||
fileSystems."/home/august/Videos" = {
|
fileSystems = {
|
||||||
device = "/mnt/WD/Videos/Movies/";
|
"/home/august/Videos" = {
|
||||||
options = [
|
device = "/mnt/WD/Videos/";
|
||||||
"nofail"
|
options = [
|
||||||
"bind"
|
"nofail"
|
||||||
"x-systemd.automount"
|
"bind"
|
||||||
];
|
"x-systemd.automount"
|
||||||
neededForBoot = false;
|
];
|
||||||
|
neededForBoot = false;
|
||||||
|
};
|
||||||
|
"/home/august/Backups" = {
|
||||||
|
device = "/mnt/WD/august/Backups";
|
||||||
|
options = [
|
||||||
|
"nofail"
|
||||||
|
"bind"
|
||||||
|
"x-systemd.automount"
|
||||||
|
];
|
||||||
|
neededForBoot = false;
|
||||||
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue