diff options
| author | Tim Keller <tjk@tjkeller.xyz> | 2026-08-26 15:53:16 -0500 |
|---|---|---|
| committer | Tim Keller <tjk@tjkeller.xyz> | 2026-08-26 15:53:16 -0500 |
| commit | a2b28f8eae8e8162c35ec8407fee038f9faaaa87 (patch) | |
| tree | f72c6ed5bf525e55417f9d48d42cb3eb278a627c /hosts/poweredge-pro/fileshares.nix | |
| parent | b691b0faa814dcaef4ef6b6c709a73ae4b232e7f (diff) | |
| download | nixos-a2b28f8eae8e8162c35ec8407fee038f9faaaa87.tar.xz nixos-a2b28f8eae8e8162c35ec8407fee038f9faaaa87.zip | |
offsite backups configured for poweredge-pro via truenas
Diffstat (limited to 'hosts/poweredge-pro/fileshares.nix')
| -rw-r--r-- | hosts/poweredge-pro/fileshares.nix | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/hosts/poweredge-pro/fileshares.nix b/hosts/poweredge-pro/fileshares.nix index 9d68e3d..0170918 100644 --- a/hosts/poweredge-pro/fileshares.nix +++ b/hosts/poweredge-pro/fileshares.nix @@ -1,4 +1,4 @@ -{ config, ... }: { +{ pkgs, config, ... }: { # Configure services services._fileShares = { enable = true; @@ -73,6 +73,14 @@ hashedPasswordFile = config.sops.secrets.user-hashed-pass.path; uid = 3003; }; + users.users.zfsbackup = { + isSystemUser = true; + group = "zfsbackup"; + shell = pkgs.bashInteractive; + hashedPassword = "!"; # Disallow login through standard means + openssh.authorizedKeys.keyFiles = [ ./resources/openssh/zfsbackup/truenas-10.0.0.9-rsa.pub ]; + }; + users.groups.zfsbackup = {}; # Configure user enrollment for samba services._fileShares.smb.enrollUsers = { |