chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add readonly sftponly data access account

Browse source
This commit is contained in:
Charlotte Van Petegem 2022-06-03 21:02:37 +02:00
parent d19ec8b548
commit e71ae589e0
No known key found for this signature in database
GPG key ID: 019E764B7184435A
5 changed files with 34 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

18
modules/services/data-access/default.nix
View file

@ -40,6 +40,10 @@
hostPath = "/srv/data";
isReadOnly = false;
};
"/home/readonly/data" = {
hostPath = "/srv/data";
isReadOnly = true;
};
"/run/secrets" = {
hostPath = "/run/data-access";
isReadOnly = true;
@ -86,10 +90,22 @@
path = "/run/data-access/password_file";
symlink = false;
};
age.secrets."data-access/readonly_password_file" = {
file = ../../../secrets/data-access/readonly_password_file.age;
path = "/run/data-access/readonly_password_file";
symlink = false;
};
age.secrets."data-access/authorized_keys" = {
file = ../../../secrets/data-access/authorized_keys.age;
owner = "charlotte";
path = "/run/data-access/authorized_keys";
path = "/run/data-access/data_authorized_keys";
symlink = false;
};
age.secrets."data-access/readonly_authorized_keys" = {
file = ../../../secrets/data-access/readonly_authorized_keys.age;
owner = "1001";
group = "65534";
path = "/run/data-access/readonly_authorized_keys";
symlink = false;
};
age.secrets."data-access/create_torrent" = {