From 69f6e8b644b6773e0846a777c609890f192accbb Mon Sep 17 00:00:00 2001
From: Timo Wilken
Date: Mon, 17 Apr 2023 16:33:23 +0200
Subject: Allow access for Syncopoli backups from phone

---
 tw/system/files/timo-phone-syncopoli.pub |  1 +
 tw/system/lud.scm                        | 13 ++++---------
 2 files changed, 5 insertions(+), 9 deletions(-)
 create mode 100644 tw/system/files/timo-phone-syncopoli.pub

(limited to 'tw/system')

diff --git a/tw/system/files/timo-phone-syncopoli.pub b/tw/system/files/timo-phone-syncopoli.pub
new file mode 100644
index 00000000..6786c7ef
--- /dev/null
+++ b/tw/system/files/timo-phone-syncopoli.pub
@@ -0,0 +1 @@
+restrict,command="cd /var/backups/timo-phone; $SSH_ORIGINAL_COMMAND" ssh-rsa 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 u0_a230@localhost
diff --git a/tw/system/lud.scm b/tw/system/lud.scm
index 79b4d9d2..8412c3a8 100644
--- a/tw/system/lud.scm
+++ b/tw/system/lud.scm
@@ -77,8 +77,9 @@ SSLSessionCacheTimeout  1200
               `(("ira"   ; for Duplicity backups
                  ,(local-file "files/kitchen-pc.pub")
                  ,(local-file "files/wilken-laptop.pub"))
-                ("timo"  ; for Password Store app on phone
-                 ,(local-file "files/timo-phone-password-store.pub"))))
+                ("timo"
+                 ,(local-file "files/timo-phone-password-store.pub")
+                 ,(local-file "files/timo-phone-syncopoli.pub"))))
 
             (service tor-service-type)
 
@@ -177,13 +178,7 @@ innodb_io_capacity = 4000
 
     ;; The list of user accounts ('root' is implicit).
     (users
-     (cons* (user-account   ; TODO: merge with "timo"?
-             (name "timo-phone")
-             (comment "Backups of Timo's phone")
-             (group "users")
-             (home-directory "/var/backups/timo-phone")
-             (shell (file-append bash-minimal "/bin/sh")))
-            (user-account
+     (cons* (user-account
              (name "ira")
              (comment "Ira Wilken")
              (group "users")
-- 
cgit v1.2.3