huge progress dump, impermanence

This commit is contained in:
Charlie Root 2024-09-20 15:45:44 +02:00
commit fce64637c2
13 changed files with 161 additions and 81 deletions

View file

@ -4,29 +4,77 @@
lib,
...
}: let
inherit (lib) optionalString mkIf mkForce;
inherit (lib) mkForce;
inherit (builtins) map;
cfg = config.modules.system.impermanence;
in {
# config = mkIf false {
# imports = [
# inputs.impermanence.nixosModules.impermanence
# ];
# environment.persistence."/persist" = {
# directories = [
# "/etc/nixos"
# "/etc/nix"
# "/etc/NetworkManager/system-connections"
# "/var/db/sudo"
# "/var/lib/bluetooth"
# "/var/lib/nixos"
# "/var/lib/pipewire"
# "/var/lib/systemd/coredump"
# ];
imports = [
inputs.impermanence.nixosModules.impermanence
];
users = {
mutableUsers = true;
# users = {
# cr = {
# initialHashedPassword = "";
# hashedPasswordFile = "/persist/passwords/cr";
# };
# root.hashedPasswordFile = "/persist/passwords/root";
# };
};
# files = [
# "/etc/machine-id"
# ];
# };
# };
environment.persistence."/persist" = {
directories = [
"/etc/nixos"
"/etc/nix"
"/etc/NetworkManager/system-connections"
"/var/db/sudo"
"/var/log"
"/var/lib/bluetooth"
"/var/lib/nixos"
"/var/lib/pipewire"
"/var/lib/systemd/coredump"
];
files = [
"/etc/machine-id"
];
users.cr = {
directories =
[
"cloud"
"repos"
".config/nicotine"
]
++ map (
dir: ".config/${dir}"
) ["nicotine" "Signal"]
++ map (
dir: ".cache/${dir}"
) ["tealdeer" "keepassxc" "nix" "starship" "nix-index" "mozilla" "zsh" "nvim"]
++ map (
dir: ".local/share/${dir}"
) ["direnv" "TelegramDesktop" "PrismLauncher" "nicotine" "zoxide"];
};
};
# for some reason *this* is what makes networkmanager not get screwed completely instead of the impermanence module
systemd.tmpfiles.rules = [
"L /var/lib/NetworkManager/secret_key - - - - /persist/var/lib/NetworkManager/secret_key"
"L /var/lib/NetworkManager/seen-bssids - - - - /persist/var/lib/NetworkManager/seen-bssids"
"L /var/lib/NetworkManager/timestamps - - - - /persist/var/lib/NetworkManager/timestamps"
];
# services.openssh.hostKeys = mkForce [
# {
# bits = 4096;
# path = "/persist/etc/ssh/ssh_host_rsa_key";
# type = "rsa";
# }
# {
# bits = 4096;
# path = "/persist/etc/ssh/ssh_host_ed25519_key";
# type = "ed25519";
# }
# ];
}