1 { pkgs, lib, config, machineName, machines, ... }:
3 inherit (config) networking;
4 inherit (config.security) gnupg;
8 networking.nftables.ruleset = ''
9 add rule inet filter fw2net tcp dport 22 ip daddr ${machines.mermet.extraArgs.ipv4} counter accept comment "SSH to mermet"
13 interval = "*-*-* *:05:00";
14 sshKey = gnupg.secrets."ssh/${user}.ssh-ed25519".path;
18 "--no-privilege-elevation"
22 after = [ gnupg.secrets."ssh/${user}.ssh-ed25519".service ];
23 wants = [ gnupg.secrets."ssh/${user}.ssh-ed25519".service ];
26 "${machineName}/home/julm/work" = {
28 target = "${user}@mermet.${networking.domain}:rpool/backup/${machineName}/home/julm/work";
30 "${user}@mermet.${networking.domain}:rpool/var/mail" = {
32 target = "${machineName}/backup/mermet/var/mail";
34 "${user}@mermet.${networking.domain}:rpool/var/public-inbox" = {
36 target = "${machineName}/backup/mermet/var/public-inbox";
38 "${user}@mermet.${networking.domain}:rpool/var/www" = {
40 target = "${machineName}/backup/mermet/var/www";
42 "${user}@mermet.${networking.domain}:rpool/var/git" = {
44 target = "${machineName}/backup/mermet/var/git";
46 "${user}@mermet.${networking.domain}:rpool/var/redis" = {
48 target = "${machineName}/backup/mermet/var/redis";
50 "${user}@mermet.${networking.domain}:rpool/home/julm/mail" = {
52 target = "${machineName}/backup/mermet/home/julm/mail";
54 "${user}@mermet.${networking.domain}:rpool/home/julm/log" = {
56 target = "${machineName}/backup/mermet/home/julm/log";