borbackup: set IdentitiesOnly=Yes

Since `borgbackup` is run as root user it might try other ssh keys.
This commit is contained in:
a-kenji 2024-06-10 00:16:38 +02:00 committed by kenji
parent b05c937151
commit 67aa84760d

View File

@ -48,7 +48,7 @@ in
type = lib.types.str;
default = "ssh -i ${
config.clanCore.facts.services.borgbackup.secret."borgbackup.ssh".path
} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null";
} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o IdentitiesOnly=Yes";
defaultText = "ssh -i \${config.clanCore.facts.services.borgbackup.secret.\"borgbackup.ssh\".path} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null";
description = "the rsh to use for the backup";
};