diff --git a/data/backup/keys/kunsi-t470.pub b/data/backup/keys/kunsi-t470.pub
new file mode 100644
index 0000000..08387c8
--- /dev/null
+++ b/data/backup/keys/kunsi-t470.pub
@@ -0,0 +1 @@
+ssh-rsa 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 cardno:000609506971
diff --git a/nodes/home/nas.py b/nodes/home/nas.py
index 00cb5d1..4115dec 100644
--- a/nodes/home/nas.py
+++ b/nodes/home/nas.py
@@ -29,6 +29,11 @@ nodes['home.nas'] = {
             'exclude_from_backups': True,
         },
         'backup-server': {
+            'clients': {
+                'kunsi-t470': {
+                    'user': 'kunsi-t470',
+                },
+            },
             'zfs-base': 'storage/backups',
         },
         'cron': {
@@ -65,6 +70,11 @@ nodes['home.nas'] = {
                 },
             },
         },
+        'openssh': {
+            'allowed_users': {
+                'kunsi-t470', # backup user
+            },
+        },
         'users': {
             'f2k1de': {
                 'ssh_pubkey': {