1 { pkgs, lib, config, inputs, ... }:
3 inherit (builtins) readFile;
4 inherit (config.users) users;
9 shell = users.root.shell;
10 openssh.authorizedKeys.keys = [
11 (readFile (inputs.secrets + "/hosts/losurdo/ssh/backup.ssh-ed25519.pub"))
12 ] ++ users."julm".openssh.authorizedKeys.keys;
14 system.activationScripts.backup = ''
15 ${pkgs.zfs}/bin/zfs allow -u ${users.backup.name} bookmark,hold,send rpool
16 ${pkgs.zfs}/bin/zfs allow -u ${users.backup.name} receive,create,mount,rollback rpool/backup
37 "rpool/backup/losurdo/var/postgresql" = {
38 use_template = [ "remote" ];
41 "rpool/backup/losurdo/var/cryptpad" = {
42 use_template = [ "remote" ];