chungus rsync init

flake.lock

@@ -951,11 +951,11 @@
     "secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1682945945,
-        "narHash": "sha256-DEC29PuP99B70ItXoWRbGA1+kB0Y/u5xUArwdaQ8UWI=",
+        "lastModified": 1682968960,
+        "narHash": "sha256-jS3NUR8OVHbXF6E2jVso2K/RyWLP8Sn5Zd4fR1EDoj8=",
         "ref": "main",
-        "rev": "ed21079d3b5cbc79f28f918ea16a735d17428570",
-        "revCount": 49,
+        "rev": "51cbb7204326cd525eb10cbfce9cb2211b6f8a2a",
+        "revCount": 50,
         "type": "git",
         "url": "ssh://gitea@git.ingolf-wagner.de/palo/nixos-secrets.git"
       },

nixos/machines/chungus/configuration.nix

@@ -30,6 +30,8 @@
     #./home-display.nix
     #./tdarr.nix
 
+    ./rsync.nix
+
   ];
 
 

nixos/machines/chungus/rsync.nix

@@ -0,0 +1,4 @@
+{... }:
+{
+sops.secrets.rsync_private_key = {};
+}

nixos/machines/robi/configuration.nix

@@ -82,7 +82,8 @@
   services.printing.enable = false;
   services.smartd.enable = true;
 
-
+    # chungus rsync
+  users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJkqVvuJSvRMO5pG2CHNNBxjB7HlJudK4TQs3BhbOWOD" ];
   fileSystems."/var/lib/nextcloud" =
     {
       device = "/dev/vg/nextcloud";