From 67aa84760dd485e9a8ece2eb2ffeb5deab9beafa Mon Sep 17 00:00:00 2001 From: a-kenji Date: Mon, 10 Jun 2024 00:16:38 +0200 Subject: [PATCH] borbackup: set `IdentitiesOnly=Yes` Since `borgbackup` is run as root user it might try other ssh keys. --- clanModules/borgbackup/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/clanModules/borgbackup/default.nix b/clanModules/borgbackup/default.nix index 1b9bdbbf..3d4a0cbb 100644 --- a/clanModules/borgbackup/default.nix +++ b/clanModules/borgbackup/default.nix @@ -48,7 +48,7 @@ in type = lib.types.str; default = "ssh -i ${ config.clanCore.facts.services.borgbackup.secret."borgbackup.ssh".path - } -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"; + } -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o IdentitiesOnly=Yes"; defaultText = "ssh -i \${config.clanCore.facts.services.borgbackup.secret.\"borgbackup.ssh\".path} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"; description = "the rsh to use for the backup"; };