From a709cc5d27485c6431d5713a0e42179d7a46e7b2 Mon Sep 17 00:00:00 2001
From: Tobias Manske <mail@tobiasmanske.de>
Date: Fri, 26 Jan 2024 22:16:25 +0100
Subject: [PATCH] Set backup clients to append only mode

---
 ansible/plays/common.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ansible/plays/common.yaml b/ansible/plays/common.yaml
index 7dfa617..3c6b47b 100644
--- a/ansible/plays/common.yaml
+++ b/ansible/plays/common.yaml
@@ -122,7 +122,7 @@
         path: /etc/ssh/authorized_keys/backup
         state: present
         search_string: "{{ keypair.public_key }}"
-        line: 'command="borg serve --restrict-to-repository {{ repo_path }}",restrict {{ keypair.public_key }}'
+        line: 'command="borg serve --append-only --restrict-to-repository {{ repo_path }}",restrict {{ keypair.public_key }}'
     - name: Add Known Hosts entries
       ansible.builtin.known_hosts:
         path: "/root/.ssh/known_hosts"