feat(akhaten): enable impermanence

This commit is contained in:
Luj 2024-08-21 23:27:25 +02:00
parent a8a2c80d52
commit 0a0f3ad1eb
Signed by: luj
GPG key ID: 6FC74C847011FD83
3 changed files with 73 additions and 6 deletions

View file

@ -1,4 +1,4 @@
{ inputs, ... }:
{ inputs, config, ... }:
{
imports = [
./hardware.nix
@ -18,9 +18,27 @@
};
deployment.tags = [ "server" ];
deployment.targetHost = config.machine.meta.ips.public.ipv4;
disko = import ./disko.nix;
environment.persistence."/persistent" = {
hideMounts = true;
directories = [
"/var/lib"
"/var/log"
"/srv"
];
files = [
"/etc/machine-id"
"/etc/ssh/ssh_host_ed25519_key"
"/etc/ssh/ssh_host_ed25519_key.pub"
];
};
fileSystems."/srv".neededForBoot = true;
fileSystems."/persistent".neededForBoot = true;
services.fail2ban.enable = true;
networking.useNetworkd = true;