From 0d9e9ffa4bfb9cefcfd757e5d456f4bfa083bd8c Mon Sep 17 00:00:00 2001
From: Franziska Kunsmann <hi@kunsmann.eu>
Date: Sat, 24 Jul 2021 12:10:54 +0200
Subject: [PATCH] home.nas: add read-only rsync user for movie storage

---
 nodes/home/nas.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/nodes/home/nas.py b/nodes/home/nas.py
index c0a6b24..ed8265c 100644
--- a/nodes/home/nas.py
+++ b/nodes/home/nas.py
@@ -190,6 +190,13 @@ nodes['home.nas'] = {
                     'nas',
                 },
             },
+            'qcn': {
+                'ssh_pubkey': {
+                    #'command="/usr/share/rsync/scripts/rrsync -ro /storage/nas/movies/",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding ',
+                    'command="/usr/share/rsync/scripts/rrsync -ro /storage/nas/movies/",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC7cCmJ1+btuwpbGrGAuiK8R/hTMCK7CFK0aK2vPcSy+ lexi@kanaya',
+                    'command="/usr/share/rsync/scripts/rrsync -ro /storage/nas/movies/",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILAwUA5t2cSy9YD+ilu5nklvokSRAoNOq/gUV73/KTsv lexi@aranea',
+                },
+            },
         },
         'zfs': {
             'module_options': {