diff --git a/systems/LoutreOS/configuration.nix b/systems/LoutreOS/configuration.nix index 588f0bf..a35b7b2 100644 --- a/systems/LoutreOS/configuration.nix +++ b/systems/LoutreOS/configuration.nix @@ -87,6 +87,7 @@ # Enable the OpenSSH daemon. services.openssh.enable = true; services.openssh.permitRootLogin = "no"; + services.openssh.passwordAuthentication = false; networking.firewall.allowedTCPPorts = [ ]; networking.firewall.allowedUDPPorts = [ ]; diff --git a/systems/LoutreOS/services.nix b/systems/LoutreOS/services.nix index 159ad77..adbe047 100644 --- a/systems/LoutreOS/services.nix +++ b/systems/LoutreOS/services.nix @@ -300,6 +300,14 @@ in }; }; + services.borgbackup.repos = { + diskstation = { + authorizedKeys = [ "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDllbxON66dBju7sMnhX8/E0VRo3+PDYvDsHP0/FK+h8JHol4+pouLmI7KIDKYOJmSuom283OqnyZOMqk+RShTwWIFm9hOd2R9aj45Zrd9jPW2APOCec/Epgogj0bwBnc0l2v6qxkxaBMgL5DnAQ+E00uvL1UQpK8c8j4GGiPlkWJD6Kf+pxmnfH1TIm+J2XCwl0oeCkSK/Frd8eM+wCraMSzoaGiEcfMz2jK8hxDWjDxX7epU0ELF22BVCuyN8cYRoFTnV88E38PlaqsOqD5ePkxk425gDh7j/C06f8QKgnasVH2diixo92kYSd7i/RmfeXDDwAD5xqUvODczEuIdt root@DiskStation" ]; + path = "/mnt/backup_loutre/diskstation_borg"; + user = "synology"; + }; + }; + services.gitea = { enable = true; cookieSecure = true; diff --git a/systems/LoutreOS/users.nix b/systems/LoutreOS/users.nix index cb68928..820812d 100644 --- a/systems/LoutreOS/users.nix +++ b/systems/LoutreOS/users.nix @@ -22,15 +22,15 @@ }; claire = { - uid = 1002; isNormalUser = true; + hashedPassword = "$6$Mu47EjsbNTewDkRp$XeQh6rcdvb3BUXzsGqekKImLTrMgnN0VyERoSbpI4rMPlx8oHM9NNeHZtfIiLEaZGtQ9otnbLa54jYse5Iwev1"; description = "Claire TREHIOU"; }; synology = { uid = 1001; isNormalUser = true; - description = "Synology backup user"; + description = "Synology Diskstation maison"; }; };