diff options
| author | Colin Wilk <colin@wilk.cx> | 2026-06-27 23:01:10 +0200 |
|---|---|---|
| committer | Colin Wilk <colin@wilk.cx> | 2026-06-27 23:05:21 +0200 |
| commit | 8d872069976c5445c4396804ef3a0196f10eb14b (patch) | |
| tree | 53ba2a34baf356fa9711e9be472d2d5322f1010e /defaults/main.yml | |
| parent | cce7d2d258292c283d64ce8da14a6d1e366b564d (diff) | |
| download | ansible-role-borgbackup-8d872069976c5445c4396804ef3a0196f10eb14b.tar.gz ansible-role-borgbackup-8d872069976c5445c4396804ef3a0196f10eb14b.zip | |
feat: add per-repo SSH key support
Add borg_ssh_key_per_repo option to generate unique SSH keypairs per
(server, repo) combination. When enabled, each repository gets its own
authorized_keys entry, enabling:
- Independent --append-only settings per repository
- Per-repo storage quotas
Diffstat (limited to 'defaults/main.yml')
| -rw-r--r-- | defaults/main.yml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/defaults/main.yml b/defaults/main.yml index b3d901c..e3af85c 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -18,6 +18,12 @@ borg_client_user: root # Options: ed25519 (recommended), rsa, ecdsa borg_ssh_key_type: rsa +# Generate a unique SSH keypair per server+repo combination. +# When true, each (borg_server_host_url, borg_repo_name) gets its own SSH key +# and authorized_keys entry. Enables per-repo quotas and independent append-only +# settings. Keys are named: id_{type}_borgbackup_{server}_{repo} +borg_ssh_key_per_repo: false + ################################################################################ # Borg Server Host Configuration ################################################################################ |