diff options
| -rw-r--r-- | hosts/poweredge-pro/fileshares.nix | 10 | ||||
| -rw-r--r-- | hosts/poweredge-pro/resources/openssh/zfsbackup/truenas-10.0.0.9-rsa.pub | 1 |
2 files changed, 10 insertions, 1 deletions
diff --git a/hosts/poweredge-pro/fileshares.nix b/hosts/poweredge-pro/fileshares.nix index 9d68e3d..0170918 100644 --- a/hosts/poweredge-pro/fileshares.nix +++ b/hosts/poweredge-pro/fileshares.nix @@ -1,4 +1,4 @@ -{ config, ... }: { +{ pkgs, config, ... }: { # Configure services services._fileShares = { enable = true; @@ -73,6 +73,14 @@ hashedPasswordFile = config.sops.secrets.user-hashed-pass.path; uid = 3003; }; + users.users.zfsbackup = { + isSystemUser = true; + group = "zfsbackup"; + shell = pkgs.bashInteractive; + hashedPassword = "!"; # Disallow login through standard means + openssh.authorizedKeys.keyFiles = [ ./resources/openssh/zfsbackup/truenas-10.0.0.9-rsa.pub ]; + }; + users.groups.zfsbackup = {}; # Configure user enrollment for samba services._fileShares.smb.enrollUsers = { diff --git a/hosts/poweredge-pro/resources/openssh/zfsbackup/truenas-10.0.0.9-rsa.pub b/hosts/poweredge-pro/resources/openssh/zfsbackup/truenas-10.0.0.9-rsa.pub new file mode 100644 index 0000000..d1191b9 --- /dev/null +++ b/hosts/poweredge-pro/resources/openssh/zfsbackup/truenas-10.0.0.9-rsa.pub @@ -0,0 +1 @@ +no-agent-forwarding,no-port-forwarding,no-X11-forwarding,no-pty ssh-rsa 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 root@truenas |