···

       
197
       
 
       
               ])) (attrValues cfg.commands);

     

       
198
       
 
       
        after = [ "zfs.target" ];

     

       
199
       
 
       
        serviceConfig = {

     

       
200
       
-
       
          ExecStartPre = (map (pool: lib.escapeShellArgs [

     

       
201
       
-
       
            "+/run/booted-system/sw/bin/zfs" "allow"

     

       
202
       
-
       
            cfg.user "hold,send" pool

     

       
203
       
-
       
          ]) (getPools "source")) ++

     

       
204
       
-
       
          (map (pool: lib.escapeShellArgs [

     

       
205
       
-
       
            "+/run/booted-system/sw/bin/zfs" "allow"

     

       
206
       
-
       
            cfg.user "create,mount,receive,rollback" pool

     

       
207
       
-
       
          ]) (getPools "target"));

     

       
208
       
 
       
          User = cfg.user;

     

       
209
       
 
       
          Group = cfg.group;

     

       
210
       
 
       
        };

     

···

       
197
       
 
       
               ])) (attrValues cfg.commands);

     

       
198
       
 
       
        after = [ "zfs.target" ];

     

       
199
       
 
       
        serviceConfig = {

     

       
200
       
+
       
          ExecStartPre = let

     

       
201
       
+
       
            allowCmd = permissions: pool: lib.escapeShellArgs [

     

       
202
       
+
       
              "+/run/booted-system/sw/bin/zfs" "allow"

     

       
203
       
+
       
              cfg.user (concatStringsSep "," permissions) pool

     

       
204
       
+
       
            ];

     

       
205
       
+
       
          in

     

       
206
       
+
       
            (map (allowCmd [ "hold" "send" "snapshot" "destroy" ]) (getPools "source")) ++

     

       
207
       
+
       
            (map (allowCmd [ "create" "mount" "receive" "rollback" ]) (getPools "target"));

     

       
208
       
 
       
          User = cfg.user;

     

       
209
       
 
       
          Group = cfg.group;

     

       
210
       
 
       
        };

     

···

       
39
       
 
       
      services.syncoid = {

     

       
40
       
 
       
        enable = true;

     

       
41
       
 
       
        sshKey = "/var/lib/syncoid/id_ecdsa";

     

       
42
       
-
       
        commonArgs = [ "--no-sync-snap" ];

     

       
43
       
 
       
        commands."pool/test".target = "root@target:pool/test";

     

       
44
       
 
       
      };

     

       
45
       
 
       
    };

     

···

       
39
       
 
       
      services.syncoid = {

     

       
40
       
 
       
        enable = true;

     

       
41
       
 
       
        sshKey = "/var/lib/syncoid/id_ecdsa";

     

       
0
       
 
       

     

       
42
       
 
       
        commands."pool/test".target = "root@target:pool/test";

     

       
43
       
 
       
      };

     

       
44
       
 
       
    };