borbackup: set IdentitiesOnly=Yes

Since `borgbackup` is run as root user it might try other ssh keys.
This commit is contained in:
a-kenji
2024-06-10 00:16:38 +02:00
committed by kenji
parent 1cc0442fd5
commit b4e5b44a76

View File

@@ -48,7 +48,7 @@ in
type = lib.types.str;
default = "ssh -i ${
config.clanCore.facts.services.borgbackup.secret."borgbackup.ssh".path
} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null";
} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o IdentitiesOnly=Yes";
defaultText = "ssh -i \${config.clanCore.facts.services.borgbackup.secret.\"borgbackup.ssh\".path} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null";
description = "the rsh to use for the backup";
};