colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

duplicity: restrict readability

Browse Source
This commit is contained in:
Colin 2023-07-15 00:02:22 +00:00
parent 809c9f74c3
commit 2385984152
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/modules/services/duplicity.nix
View File

@ -15,8 +15,12 @@ in
config = mkIf cfg.enable {
# we need this mostly because of the size of duplicity's cache
# TODO: move to cryptClearOnBoot and update perms
sane.persist.sys.plaintext = [ "/var/lib/duplicity" ];
sane.persist.sys.cryptClearOnBoot = [{
path = "/var/lib/duplicity";
user = "root";
group = "root";
mode = "0700";
}];
services.duplicity.enable = true;
services.duplicity.targetUrl = "$DUPLICITY_URL";