Create backuphost Bragi

nixos/modules/borgbackup.nix

@@ -21,7 +21,7 @@ in {
       # repos are made available at ssh://borg@hostname and served according to the presented ssh-key
       repos = {
         aphoom-zhah = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA8pI6uinXezAMH4vG2yEbu/yOYU5vXcsZN74tYgV+Wj Aphoom-Zhah Backup"
           ];
           path = "/var/lib/backups/aphoom-zhah";
@@ -29,70 +29,70 @@ in {
           allowSubRepos = true;
         };
         azathoth = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGBEwllQ77ktoirXX6dJ6ET8TfK4lzq0aaq+X4rrX2Vk Azathoth Backup"
           ];
           path = "/var/lib/backups/azathoth";
           allowSubRepos = true;
         };
         cthulhu = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMSJl1MvabUADTdOCgufsBzn1tIIpxMq4iDcYZsaW1lV Cthulhu Backup"
           ];
           path = "/var/lib/backups/cthulhu";
           allowSubRepos = true;
         };
         dagon = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJaTBennwqT9eB43gVD1nM1os3dMPZ8RWwIKPEjqMK5V Dagon Backup"
           ];
           path = "/var/lib/backups/dagon";
           allowSubRepos = true;
         };
         eihort = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHLoDxtY4Tp6NKxLt9oHmWT6w4UpU6eA1TnPU2Ut83BN Eihort Backup"
           ];
           path = "/var/lib/backups/eihort";
           allowSubRepos = true;
         };
         hastur = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILeDvTyOUdIPARatX0PPhHgrV1gjERWLt2Twa8E2GETb Hastur Backupsystem"
           ];
           path = "/var/lib/backups/hastur";
           allowSubRepos = true;
         };
         ithaqua = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPJmBf8cz3FTDdeuxWbp1MO2yPT5rvH8ZIGUzfogjpXi Ithaqua Backup"
           ];
           path = "/var/lib/backups/ithaqua";
           allowSubRepos = true;
         };
         sanctamariamaterdei = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH9Le5OI4ympQ0mQKYHmxgxGF598rzpD5VVpWK1mGfd8 Sanctamariamaterdei Backupsystem"
           ];
           path = "/var/lib/backups/sanctamariamaterdei";
           allowSubRepos = true;
         };
         tsathoggua = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKS9/1lFOhv+3sNuGcysM3TYh2xRrjMeAZX3K7CBx0QW Tsathoggua Backup"
           ];
           path = "/var/lib/backups/tsathoggua";
           allowSubRepos = true;
         };
         uvhash = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB8DjIqgFgmYhQnTLpbqL0r7xBPb8TPy6SO5RhQ31OGj Uvhash Backup"
           ];
           path = "/var/lib/backups/uvhash";
           allowSubRepos = true;
         };
         yibb-tstll = {
-          authorizedKeys = [
+          authorizedKeysAppendOnly = [
             "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINlnGOV58Ks9lu+WTI4F7QAHtDrJq2jY8ZocITZG8K0+ Yibb-Tstll Backup"
           ];
           path = "/var/lib/backups/yibb-tstll";