backups

2026-07-19 17:35:55 +02:00
parent b50bd0c303
commit 878f7dfa75
7 changed files with 160 additions and 0 deletions
@@ -0,0 +1,11 @@
+#!/bin/bash
+# only allow read-only rsync, BUT elevated so all application data is readable.
+case "$SSH_ORIGINAL_COMMAND" in
+    "rsync --server --sender "*)
+        exec sudo /usr/bin/rsync ${SSH_ORIGINAL_COMMAND#rsync }
+        ;;
+    *)
+        echo "backup key only permits read-only rsync" >&2
+        exit 1
+        ;;
+esac