programs.zsh.enable = true;
+ users.users.backup = {
+ home = "/var/lib/backup";
+ createHome = true;
+ hashedPassword = "!";
+ isSystemUser = true;
+ shell = pkgs.bashInteractive;
+ openssh.authorizedKeys.keys = let
+ in
+ ["command=\"${pkgs.rrsync_sudo}/bin/rrsync /var/lib/backup/eldiron/\" ${config.myEnv.rsync_backup.ssh_key.public}"];
+ };
+ security.sudo.extraRules = [
+ {
+ commands = [
+ { command = "${pkgs.rsync}/bin/rsync"; options = [ "NOPASSWD" ]; }
+ ];
+ users = [ "backup" ];
+ runAs = "root";
+ }
+ ];
+
+ system.activationScripts.backup_home = ''
+ chown root:root /var/lib/backup
+ install -m 0750 -o backup -g root -d /var/lib/backup/eldiron
+ '';
+
time.timeZone = "Europe/Paris";
nix = {
useSandbox = "relaxed";