From 8d872069976c5445c4396804ef3a0196f10eb14b Mon Sep 17 00:00:00 2001 From: Colin Wilk Date: Sat, 27 Jun 2026 23:01:10 +0200 Subject: feat: add per-repo SSH key support Add borg_ssh_key_per_repo option to generate unique SSH keypairs per (server, repo) combination. When enabled, each repository gets its own authorized_keys entry, enabling: - Independent --append-only settings per repository - Per-repo storage quotas --- defaults/main.yml | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'defaults') diff --git a/defaults/main.yml b/defaults/main.yml index b3d901c..e3af85c 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -18,6 +18,12 @@ borg_client_user: root # Options: ed25519 (recommended), rsa, ecdsa borg_ssh_key_type: rsa +# Generate a unique SSH keypair per server+repo combination. +# When true, each (borg_server_host_url, borg_repo_name) gets its own SSH key +# and authorized_keys entry. Enables per-repo quotas and independent append-only +# settings. Keys are named: id_{type}_borgbackup_{server}_{repo} +borg_ssh_key_per_repo: false + ################################################################################ # Borg Server Host Configuration ################################################################################ -- cgit v1.2.3