diff options
| author | Soispha <soispha@vhack.eu> | 2023-07-07 07:57:19 +0200 |
|---|---|---|
| committer | Soispha <soispha@vhack.eu> | 2023-07-07 07:57:19 +0200 |
| commit | 2c6c07ec5f0d5ebadef35bcc5212bee9f4330fb4 (patch) | |
| tree | 938968302823cfa649d8e14aaedafd6b6c9517e2 /system/impermanence | |
| parent | Chore(.gitattributes): Remove removed acme path (diff) | |
| download | nixos-server-2c6c07ec5f0d5ebadef35bcc5212bee9f4330fb4.tar.gz nixos-server-2c6c07ec5f0d5ebadef35bcc5212bee9f4330fb4.zip | |
Refactor(system/impermanence): Move to own directory
Diffstat (limited to 'system/impermanence')
| -rw-r--r-- | system/impermanence/default.nix | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/system/impermanence/default.nix b/system/impermanence/default.nix new file mode 100644 index 0000000..32ad9f7 --- /dev/null +++ b/system/impermanence/default.nix @@ -0,0 +1,26 @@ +{...}: { + environment.persistence."/srv" = { + hideMounts = true; + directories = [ + "/etc/nixos" + "/var/log" + "/var/lib/postgresql" + "/var/lib/acme" + { + directory = "/var/lib/nix-sync"; + user = "nix-sync"; + group = "nix-sync"; + mode = "0700"; + } + { + directory = "/var/lib/sshd"; + user = "root"; + group = "root"; + mode = "0755"; + } + ]; + files = [ + "/etc/machine-id" + ]; + }; +} |