From 7c4439dbc024a9c5e5a1ff40a672a5c1490e6e74 Mon Sep 17 00:00:00 2001
From: Vegard Bieker Matthey <VegardMatthey@protonmail.com>
Date: Sat, 23 May 2026 23:36:13 +0200
Subject: [PATCH] bekkalokk: pull rendered map from gluttony

---
 hosts/bekkalokk/services/bluemap.nix | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/hosts/bekkalokk/services/bluemap.nix b/hosts/bekkalokk/services/bluemap.nix
index bb14b70..5705da6 100644
--- a/hosts/bekkalokk/services/bluemap.nix
+++ b/hosts/bekkalokk/services/bluemap.nix
@@ -1,6 +1,7 @@
-{ config, lib, pkgs, inputs, ... }:
+{ config, lib, pkgs, inputs, values, ... }:
 let
   vanillaSurvival = "/var/lib/bluemap/vanilla_survival_world";
+  webExport = "/var/lib/bluemap/web";
   format = pkgs.formats.hocon { };
 in {
   # NOTE: our versino of the module gets added in flake.nix
@@ -117,5 +118,22 @@ in {
     '';
   };
 
+  services.rsync-pull-targets = {
+    enable = true;
+    locations.${webExport} = {
+      user = "root";
+      rrsyncArgs.wo = true;
+      authorizedKeysAttrs = [
+        "restrict"
+        "from=\"gluttony.pvv.ntnu.no,${values.hosts.gluttony.ipv6},${values.hosts.gluttony.ipv4}\""
+        "no-agent-forwarding"
+        "no-port-forwarding"
+        "no-pty"
+        "no-X11-forwarding"
+      ];
+      publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYpjmQYs3pKV29/hVCeNQQ/WRmwGdhMEUJvAC99sZEp root@nixos";
+    };
+  };
+
   networking.firewall.allowedUDPPorts = [ 443 ];
 }