diff --git a/flake.lock b/flake.lock index d037573..c9ef58d 100644 --- a/flake.lock +++ b/flake.lock @@ -20,11 +20,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1778737229, - "narHash": "sha256-6xWoytx8jFW4PF1GjRm/i/53trbpKGfz6zjzQGBr4cI=", + "lastModified": 1779796641, + "narHash": "sha256-ZsIrKmhp4vbBXoXXmR/tBXA/UCsAQiJL9vsgZEduhVY=", "owner": "nixos", "repo": "nixpkgs", - "rev": "d7a713c0b7e47c908258e71cba7a2d77cc8d71d5", + "rev": "25f538306313eae3927264466c70d7001dcea1df", "type": "github" }, "original": { diff --git a/machines/lebesgue/config/#state.nix# b/machines/lebesgue/config/#state.nix# new file mode 100644 index 0000000..a467fab --- /dev/null +++ b/machines/lebesgue/config/#state.nix# @@ -0,0 +1,37 @@ +{ config, ... }: +{ + sops.age.sshKeyPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ]; + + environment.persistence."/persist" = { + directories = [ + "/var/cache/restic-backups-s3" + "/var/lib/continuwuity" + "/var/lib/forgejo" + "/var/lib/tailscale" + "/var/lib/goatcounter" + "/var/log" + "/var/lib/nixos" + "/var/lib/docker" + "/var/lib/authelia-main" + "/var/lib/caddy/.local/share/caddy" + "/var/lib/vaultwarden" + "opt/continuwuity-db-backups" + + { + directory = "/var/lib/lldap"; + user = "lldap"; + group = "lldap"; + mode = "0700"; + } + ]; + + files = [ + "/etc/machine-id" + "/etc/ssh/ssh_host_rsa_key.pub" + "/etc/ssh/ssh_host_rsa_key" + "/etc/ssh/ssh_host_ed25519_key" + "/etc/ssh/ssh_host_ed25519_key.pub" + "/var/lib/systemd/random-seed" + ]; + }; +} diff --git a/machines/lebesgue/flake.lock b/machines/lebesgue/flake.lock index f40d5ca..c4c9478 100644 --- a/machines/lebesgue/flake.lock +++ b/machines/lebesgue/flake.lock @@ -50,11 +50,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1778737229, - "narHash": "sha256-6xWoytx8jFW4PF1GjRm/i/53trbpKGfz6zjzQGBr4cI=", + "lastModified": 1779796641, + "narHash": "sha256-ZsIrKmhp4vbBXoXXmR/tBXA/UCsAQiJL9vsgZEduhVY=", "owner": "nixos", "repo": "nixpkgs", - "rev": "d7a713c0b7e47c908258e71cba7a2d77cc8d71d5", + "rev": "25f538306313eae3927264466c70d7001dcea1df", "type": "github" }, "original": {