From a2b28f8eae8e8162c35ec8407fee038f9faaaa87 Mon Sep 17 00:00:00 2001
From: Tim Keller <tjk@tjkeller.xyz>
Date: Wed, 26 Aug 2026 15:53:16 -0500
Subject: offsite backups configured for poweredge-pro via truenas

---
 hosts/poweredge-pro/fileshares.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'hosts/poweredge-pro/fileshares.nix')

diff --git a/hosts/poweredge-pro/fileshares.nix b/hosts/poweredge-pro/fileshares.nix
index 9d68e3d..0170918 100644
--- a/hosts/poweredge-pro/fileshares.nix
+++ b/hosts/poweredge-pro/fileshares.nix
@@ -1,4 +1,4 @@
-{ config, ... }: {
+{ pkgs, config, ... }: {
 	# Configure services
 	services._fileShares = {
 		enable = true;
@@ -73,6 +73,14 @@
 		hashedPasswordFile = config.sops.secrets.user-hashed-pass.path;
 		uid = 3003;
 	};
+	users.users.zfsbackup = {
+		isSystemUser = true;
+		group = "zfsbackup";
+		shell = pkgs.bashInteractive;
+		hashedPassword = "!";  # Disallow login through standard means
+		openssh.authorizedKeys.keyFiles = [ ./resources/openssh/zfsbackup/truenas-10.0.0.9-rsa.pub ];
+	};
+	users.groups.zfsbackup = {};
 
 	# Configure user enrollment for samba
 	services._fileShares.smb.enrollUsers = {
-- 
cgit v1.2.3