From: Martin Pitt <martin@piware.de>
Date: Sat, 11 Oct 2025 17:47:13 +0000 (+0200)
Subject: backup: Move to TPM ssh key
X-Git-Url: https://piware.de/gitweb/?a=commitdiff_plain;h=971ba73054aabef97b30f32d4ae45b6f783bbf49;p=bin.git

backup: Move to TPM ssh key
---

diff --git a/backup b/backup
index 79dc369..acee348 100755
--- a/backup
+++ b/backup
@@ -3,7 +3,10 @@ set -eu
 cd $HOME
 LOG=.cache/backup/log
 PATH=$PATH:/sbin:/usr/sbin
-RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp:piware.de:backup/restic"
+#RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp:piware.de:backup/restic"
+# use TPM key; requires ~/.ssh/authorized_keys with
+# command="internal-sftp -d backup/restic",restrict KEY tpm-backup@abakus
+RESTIC="restic --password-file $HOME/.config/backup-passphrase --repo sftp:piwaretpmbackup:"
 
 fail() {
     notify-send -i /usr/share/icons/Adwaita/48x48/status/network-error-symbolic.symbolic.png -u critical -t 180000 "${1:-BACKUP FAILED!}"