66 lines
1.6 KiB
Nix
Executable File
66 lines
1.6 KiB
Nix
Executable File
{ ... }:
|
|
{
|
|
# Set up impernance configuration for things like bluetooth
|
|
# In this configuration with /etc and /var/log being persistent, only directories outside of that need to be done here. See hardware configuration for all mountpoints.
|
|
|
|
environment.persistence."/nix/persist/system" = {
|
|
hideMounts = true;
|
|
directories = [
|
|
"/var/lib/bluetooth"
|
|
"/var/lib/nixos"
|
|
"/var/lib/tailscale"
|
|
"/var/lib/systemd/coredump"
|
|
"/etc/NetworkManager/system-connections"
|
|
"/etc/secureboot"
|
|
{
|
|
directory = "/var/lib/private/authentik/media";
|
|
user = "authentik";
|
|
group = "authentik";
|
|
mode = "u=rwx,g=,o=";
|
|
}
|
|
{
|
|
directory = "/var/lib/private";
|
|
mode = "u=rwx,g=rx,o=";
|
|
}
|
|
{
|
|
directory = "/var/lib/colord";
|
|
user = "colord";
|
|
group = "colord";
|
|
mode = "u=rwx,g=rx,o=";
|
|
}
|
|
{
|
|
directory = "/etc/nix";
|
|
user = "root";
|
|
group = "wheel";
|
|
mode = "u=rwx,g=rx,o=rx";
|
|
}
|
|
{
|
|
directory = "/media/nas";
|
|
user = "nas-apps";
|
|
group = "jallen-nas";
|
|
mode = "u=rwx,g=rx,o=rx";
|
|
}
|
|
{
|
|
directory = "/var/lib/crowdsec";
|
|
user = "crowdsec";
|
|
group = "crowdsec";
|
|
mode = "u=rwx,g=rwx,o=rx";
|
|
}
|
|
{
|
|
directory = "/plugins-storage";
|
|
user = "traefik";
|
|
group = "traefik";
|
|
mode = "u=rwx,g=rwx,o=rx";
|
|
}
|
|
];
|
|
files = [
|
|
"/var/cache-priv-key.pem"
|
|
];
|
|
};
|
|
|
|
security.sudo.extraConfig = ''
|
|
# rollback results in sudo lectures after each reboot
|
|
Defaults lecture = never
|
|
'';
|
|
}
|