Restrict SSH key to only execute rsync

You can force use of rsync by editing the public key in the authorized_keys file on the server, like this:

command="/usr/bin/rsync -wo /path/to/data",no-port-forwarding ssh-rsa ....