vno3-nk: add borgstor

hosts/vno1-gdrx/configuration.nix

@@ -94,6 +94,15 @@ in
         extraSubnets = [ myData.subnets.vno1.cidr ];
       };
 
+      borgstor = {
+        enable = true;
+        dataDir = "/data/borg";
+        sshKeys = with myData; [
+          hosts."fwminex.servers.jakst".publicKey
+          people_pubkeys.motiejus
+        ];
+      };
+
       ssh8022.client = {
         enable = true;
         keyfile = config.age.secrets.ssh8022-client.path;

modules/services/borgstor/default.nix

@@ -21,7 +21,7 @@
         shell = "/bin/sh";
         group = "borgstor";
         isSystemUser = true;
-        createHome = false;
+        createHome = true;
         uid = myData.uidgid.borgstor;
         openssh.authorizedKeys.keys = map (
           k: ''command="${pkgs.borgbackup}/bin/borg serve --restrict-to-path ${dataDir}",restrict ${k}''