};
# ssh-keyscan backup-2 | nix-shell -p ssh-to-age --run ssh-to-age
secrets.ageKeys = [ "age1kk3nr27qu42j28mcfdag5lhq0zu2pky7gfanvne8l4z2ctevjpgskmw0sr" ];
- secrets.keys = [
- {
- dest = "rsync_backup/identity";
+ secrets.keys = {
+ "rsync_backup/identity" = {
user = "backup";
group = "backup";
permissions = "0400";
text = config.myEnv.rsync_backup.ssh_key.private;
- }
- {
- dest = "rsync_backup/identity.pub";
+ };
+ "rsync_backup/identity.pub" = {
user = "backup";
group = "backup";
permissions = "0444";
text = config.myEnv.rsync_backup.ssh_key.public;
- }
- ];
+ };
+ };
boot.kernelPackages = pkgs.linuxPackages_latest;
myEnv = import ../../../nixops/secrets/environment.nix;