ildkule/uptime-kuma: set up rsync pull target for principal

kommode: sign merge commits and sign crud actions
2026-05-26 13:37:29 +09:00 · 2026-05-25 20:21:23 +02:00
2 changed files with 20 additions and 1 deletions
@@ -1,4 +1,4 @@
-{ config, pkgs, lib, ... }:
+{ config, pkgs, lib, values, ... }:
 let
  cfg = config.services.uptime-kuma;
  domain = "status.pvv.ntnu.no";
@@ -24,4 +24,21 @@ in {
    fsType = "bind";
    options = [ "bind" ];
  };
+
+  services.rsync-pull-targets = {
+    enable = true;
+    locations.${stateDir} = {
+      user = "root";
+      rrsyncArgs.ro = true;
+      authorizedKeysAttrs = [
+        "restrict"
+        "from=\"principal.pvv.ntnu.no,${values.hosts.principal.ipv6},${values.hosts.principal.ipv4}\""
+        "no-agent-forwarding"
+        "no-port-forwarding"
+        "no-pty"
+        "no-X11-forwarding"
+      ];
+      publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJXzcDm6cVr4NmWzUSroy33FlielKqaG83wY0RCMC0p/ uptime_kuma rsync backup";
+    };
+  };
 }
@@ -50,6 +50,8 @@ in
    SIGNING_NAME = "PVV Git";
    SIGNING_EMAIL = "gitea@git.pvv.ntnu.no";
    INITIAL_COMMIT = "always";
+    MERGES = lib.concatStringsSep "," [ "always" ];
+    CRUD_ACTIONS = lib.concatStringsSep "," [ "always" ];
    WIKI = "always";
  };
 }
Author	SHA1	Message	Date
oysteikt	47a744f68f	ildkule/uptime-kuma: set up rsync pull target for principal Build topology graph / evals (push) Successful in 4m0s Details Eval nix flake / evals (push) Successful in 4m14s Details	2026-05-26 13:37:29 +09:00
vegardbm	da505d4fe2	kommode: sign merge commits and sign crud actions Build topology graph / evals (push) Successful in 2m41s Details Eval nix flake / evals (pull_request) Successful in 4m2s Details Eval nix flake / evals (push) Successful in 4m5s Details	2026-05-25 20:21:23 +02:00