diff --git a/home/private_dot_ssh/config.tmpl b/home/private_dot_ssh/config.tmpl index 0f158f45..9d3e7df7 100644 --- a/home/private_dot_ssh/config.tmpl +++ b/home/private_dot_ssh/config.tmpl @@ -1,6 +1,10 @@ Host github.com AddKeysToAgent yes IdentityFile /run/agenix/git/github_personal + +Host fm2120.rsync.net + AddKeysToAgent yes + IdentityFile /run/agenix/borg/rsync/id_rsa {{ if eq .chezmoi.hostname "kestrel" }} Host torus AddKeysToAgent yes diff --git a/provision/hosts/torus/backup.nix b/provision/hosts/torus/backup.nix index db3d3db3..392e95ff 100644 --- a/provision/hosts/torus/backup.nix +++ b/provision/hosts/torus/backup.nix @@ -20,6 +20,16 @@ owner = "${user}"; group = "users"; }; + age.secrets."borg/rsync/id_rsa" = { + file = ../../secrets/borg/rsync/id_rsa.age; + owner = "${user}"; + group = "users"; + }; + age.secrets."borg/rsync/id_rsa.pub" = { + file = ../../secrets/borg/rsync/id_rsa.pub.age; + owner = "${user}"; + group = "users"; + }; # Password-less login for user users.users."${user}".openssh.authorizedKeys.keyFiles = [ @@ -31,6 +41,10 @@ Host kestrel AddKeysToAgent yes IdentityFile /run/agenix/ssh/torus/id_ed25519 + + Host fm2120.rsync.net + AddKeysToAgent yes + IdentityFile /run/agenix/borg/rsync/id_rsa ''; } diff --git a/provision/secrets/borg/rsync/id_rsa.age b/provision/secrets/borg/rsync/id_rsa.age new file mode 100644 index 00000000..10337aa1 Binary files /dev/null and b/provision/secrets/borg/rsync/id_rsa.age differ diff --git a/provision/secrets/borg/rsync/id_rsa.pub.age b/provision/secrets/borg/rsync/id_rsa.pub.age new file mode 100644 index 00000000..b3ec7c0b Binary files /dev/null and b/provision/secrets/borg/rsync/id_rsa.pub.age differ diff --git a/provision/secrets/secrets.nix b/provision/secrets/secrets.nix index 75ac0b7b..865f6230 100644 --- a/provision/secrets/secrets.nix +++ b/provision/secrets/secrets.nix @@ -22,5 +22,7 @@ in "ssh/torus/id_ed25519.age".publicKeys = [ tstarr_torus ] ++ systems; "ssh/torus/id_ed25519.pub.age".publicKeys = users ++ systems; "borg/torus/password.age".publicKeys = [ tstarr_torus ] ++ systems; + "borg/rsync/id_rsa.age".publicKeys = users ++ systems; + "borg/rsync/id_rsa.pub.age".publicKeys = users ++ systems; }