summaryrefslogtreecommitdiff
path: root/hosts/cez/modules
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/cez/modules')
-rw-r--r--hosts/cez/modules/sshfs.nix11
1 files changed, 8 insertions, 3 deletions
diff --git a/hosts/cez/modules/sshfs.nix b/hosts/cez/modules/sshfs.nix
index a1f1904..a9ff183 100644
--- a/hosts/cez/modules/sshfs.nix
+++ b/hosts/cez/modules/sshfs.nix
@@ -1,22 +1,27 @@
{ config, pkgs, ... }:
let
- user = config.userdata.user;
domain = config.userdata.domain;
+ user = config.userdata.user;
+ uid = config.users.users.${user}.uid;
+ gid = config.users.groups.users.gid;
in
{
+ sops.secrets."misc/sftp" = {};
system.fsPackages = with pkgs; [ sshfs ];
fileSystems."/kay" = {
- device = "${user}@${domain}:";
+ device = "sftp@${domain}:";
fsType = "sshfs";
options = [
"allow_other" # for non-root access
+ "uid=${toString uid}"
+ "gid=${toString gid}"
"_netdev" # this is a network fs
"x-systemd.automount" # mount on demand
"reconnect" # handle connection drops
"ServerAliveInterval=15" # keep connections alive
- "IdentityFile=/var/secrets/ssh/${user}.key"
+ "IdentityFile=${config.sops.secrets."misc/sftp".path}"
];
};
}