README: add note about rrsync setup on the remote
This commit is contained in:
parent
4ed7b49df1
commit
2e418e19b8
12
README.md
12
README.md
|
@ -33,4 +33,16 @@ Advanced usage:
|
|||
known-hosts-content: "[hostname]:2222 ssh-ed25519 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
|
||||
```
|
||||
|
||||
## Recommended setup on the remote server
|
||||
|
||||
To force the action to only write to a specific directory,
|
||||
and to prevent excessive damage should the SSH key be compromised,
|
||||
it is recommended to force the command in the `authorized_keys` file.
|
||||
|
||||
```shell
|
||||
command="rrsync -wo /directory/to/write/to",restrict,no-agent-forwarding,no-port-forwarding,no-pty,no-X11-forwarding ssh-ed25519 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
|
||||
```
|
||||
|
||||
The path specified in `target` will now be relative to `/directory/to/write/to`.
|
||||
|
||||
[rsync]: https://rsync.samba.org/
|
Loading…
Reference in New Issue