From ea9346d25da9a81eba74b1970581868f66bf3a0f Mon Sep 17 00:00:00 2001
From: Johannes Erwerle <jo@swagspace.org>
Date: Wed, 13 May 2026 00:01:04 +0200
Subject: [PATCH] Added SSH public keys to the borg repository listing

---
 README.md                                     | 22 +++++++++++++++++++
 .../community_backup/context_processors.py    |  7 ++++++
 .../community_backup/example_configuration.py | 15 +++++++++++++
 community_backup/community_backup/settings.py |  2 ++
 .../webui/templates/borg_list.html            | 15 +++++++++++++
 5 files changed, 61 insertions(+)

diff --git a/README.md b/README.md
index 6d5a710..d3ab045 100644
--- a/README.md
+++ b/README.md
@@ -146,3 +146,25 @@ Django debug setting.
 ```python
 ADDITIONAL_FOOTER_NAV_ITEMS = ["""<a class="nav-link" href="https://example.com/>Example Link</a>""",]
 ```
+
+### BORG_SERVER_PUBKEYS
+
+A list of the SSH public keys and their hashes to verify the server a User is connecting to.
+This is a list of tuples, containing the key and it's hash.
+
+```python
+BORG_SERVER_PUBKEYS = [
+    (
+        "ecdsa-sha2-nistp256 AAAAASDJIASKJDASD root@example.com",
+        "256 SHA256:sTbOK9NvP1uUEixgUT8KUiYrY8J/DbK+jR39lwcT8Zw root@example.com (ECDSA)",
+    ),
+    (
+        "ssh-ed25519 AAAAasdiwdkjasdijwklajsdijasd root@example.com",
+        "256 SHA256:hPbWwRxNr1mFHZKYjcysnay1cQGQsOmDBvkA3Pzo4YY root@example.com (ED25519)",
+    ),
+    (
+        "ssh-rsa AAAABasdlkjasdiualksjd root@example.com",
+        "3072 SHA256:deuPTR8Hcc1LP7DHqAp91EINdLBQoco2IeMldIahamQ root@example.com (RSA)",
+    ),
+]
+```
diff --git a/community_backup/community_backup/context_processors.py b/community_backup/community_backup/context_processors.py
index 6678088..6fa8a78 100644
--- a/community_backup/community_backup/context_processors.py
+++ b/community_backup/community_backup/context_processors.py
@@ -6,7 +6,14 @@ def release_version(_request):
         "RELEASE_VERSION": settings.RELEASE_VERSION,
     }
 
+
 def additional_footer_nav_items(_request):
     return {
         "ADDITIONAL_FOOTER_NAV_ITEMS": settings.ADDITIONAL_FOOTER_NAV_ITEMS,
     }
+
+
+def borg_server_pubkeys(_request):
+    return {
+        "BORG_SERVER_PUBKEYS": settings.BORG_SERVER_PUBKEYS,
+    }
diff --git a/community_backup/community_backup/example_configuration.py b/community_backup/community_backup/example_configuration.py
index 6ad812f..3f15331 100644
--- a/community_backup/community_backup/example_configuration.py
+++ b/community_backup/community_backup/example_configuration.py
@@ -22,3 +22,18 @@ SECRET_KEY = "change me!"
 
 MARKDOWN_PAGE_DIR = Path("./custom_md/")
 BACKUP_MANAGE_PY = Path("/path/to/venv/bin/python /path/to/community_backup/manage.py")
+
+# BORG_SERVER_PUBKEYS = [
+#     (
+#         "ecdsa-sha2-nistp256 AAAAASDJIASKJDASD root@example.com",
+#         "256 SHA256:sTbOK9NvP1uUEixgUT8KUiYrY8J/DbK+jR39lwcT8Zw root@example.com (ECDSA)",
+#     ),
+#     (
+#         "ssh-ed25519 AAAAasdiwdkjasdijwklajsdijasd root@example.com",
+#         "256 SHA256:hPbWwRxNr1mFHZKYjcysnay1cQGQsOmDBvkA3Pzo4YY root@example.com (ED25519)",
+#     ),
+#     (
+#         "ssh-rsa AAAABasdlkjasdiualksjd root@example.com",
+#         "3072 SHA256:deuPTR8Hcc1LP7DHqAp91EINdLBQoco2IeMldIahamQ root@example.com (RSA)",
+#     ),
+# ]
diff --git a/community_backup/community_backup/settings.py b/community_backup/community_backup/settings.py
index a4b39db..2f0876e 100644
--- a/community_backup/community_backup/settings.py
+++ b/community_backup/community_backup/settings.py
@@ -68,6 +68,7 @@ TEMPLATES = [
                 "django.contrib.messages.context_processors.messages",
                 "community_backup.context_processors.release_version",
                 "community_backup.context_processors.additional_footer_nav_items",
+                "community_backup.context_processors.borg_server_pubkeys",
             ],
         },
     },
@@ -150,3 +151,4 @@ BACKUP_MANAGE_PY = module.BACKUP_MANAGE_PY
 
 DEBUG = getattr(module, "DEBUG", False)
 ADDITIONAL_FOOTER_NAV_ITEMS = getattr(module, "ADDITIONAL_FOOTER_NAV_ITEMS", list())
+BORG_SERVER_PUBKEYS = getattr(module, "BORG_SERVER_PUBKEYS", list())
diff --git a/community_backup/webui/templates/borg_list.html b/community_backup/webui/templates/borg_list.html
index 303a9eb..2f6e7c7 100644
--- a/community_backup/webui/templates/borg_list.html
+++ b/community_backup/webui/templates/borg_list.html
@@ -35,6 +35,21 @@
   </tbody>
 </table>
 
+{% if BORG_SERVER_PUBKEYS %}
+<div class="card">
+  <div class="card-header">
+    <h4>Borg Server Public Keys</h4>
+  </div>
+  <ul class="list-group list-group-flush">
+  {% for key, fingerprint in BORG_SERVER_PUBKEYS %}
+    <li class="list-group-item">
+      <span style="word-break: break-all"><code>{{ key }}</code></span><br>
+      <span style="word-break: break-all"><code>{{ fingerprint }}</code></span>
+    </li>
+  {% endfor %}
+  </ul>
+</div>
+{% endif %}