summary refs log tree commit diff stats
path: root/system/impermanence/default.nix
diff options
context:
space:
mode:
authorSoispha <soispha@vhack.eu>2023-07-07 07:57:19 +0200
committerSoispha <soispha@vhack.eu>2023-07-07 07:57:19 +0200
commit2c6c07ec5f0d5ebadef35bcc5212bee9f4330fb4 (patch)
tree938968302823cfa649d8e14aaedafd6b6c9517e2 /system/impermanence/default.nix
parentChore(.gitattributes): Remove removed acme path (diff)
downloadnixos-server-2c6c07ec5f0d5ebadef35bcc5212bee9f4330fb4.tar.gz
nixos-server-2c6c07ec5f0d5ebadef35bcc5212bee9f4330fb4.zip
Refactor(system/impermanence): Move to own directory
Diffstat (limited to 'system/impermanence/default.nix')
-rw-r--r--system/impermanence/default.nix26
1 files changed, 26 insertions, 0 deletions
diff --git a/system/impermanence/default.nix b/system/impermanence/default.nix
new file mode 100644
index 0000000..32ad9f7
--- /dev/null
+++ b/system/impermanence/default.nix
@@ -0,0 +1,26 @@
+{...}: {
+  environment.persistence."/srv" = {
+    hideMounts = true;
+    directories = [
+      "/etc/nixos"
+      "/var/log"
+      "/var/lib/postgresql"
+      "/var/lib/acme"
+      {
+        directory = "/var/lib/nix-sync";
+        user = "nix-sync";
+        group = "nix-sync";
+        mode = "0700";
+      }
+      {
+        directory = "/var/lib/sshd";
+        user = "root";
+        group = "root";
+        mode = "0755";
+      }
+    ];
+    files = [
+      "/etc/machine-id"
+    ];
+  };
+}