mirror of
https://github.com/JulienMalka/snowfield.git
synced 2025-06-08 18:09:06 +02:00
feat(akhaten): enable impermanence
This commit is contained in:
parent
a8a2c80d52
commit
0a0f3ad1eb
3 changed files with 73 additions and 6 deletions
|
@ -1,4 +1,4 @@
|
|||
{ inputs, ... }:
|
||||
{ inputs, config, ... }:
|
||||
{
|
||||
imports = [
|
||||
./hardware.nix
|
||||
|
@ -18,9 +18,27 @@
|
|||
};
|
||||
|
||||
deployment.tags = [ "server" ];
|
||||
deployment.targetHost = config.machine.meta.ips.public.ipv4;
|
||||
|
||||
disko = import ./disko.nix;
|
||||
|
||||
environment.persistence."/persistent" = {
|
||||
hideMounts = true;
|
||||
directories = [
|
||||
"/var/lib"
|
||||
"/var/log"
|
||||
"/srv"
|
||||
];
|
||||
files = [
|
||||
"/etc/machine-id"
|
||||
"/etc/ssh/ssh_host_ed25519_key"
|
||||
"/etc/ssh/ssh_host_ed25519_key.pub"
|
||||
];
|
||||
};
|
||||
|
||||
fileSystems."/srv".neededForBoot = true;
|
||||
fileSystems."/persistent".neededForBoot = true;
|
||||
|
||||
services.fail2ban.enable = true;
|
||||
|
||||
networking.useNetworkd = true;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue