35 lines
811 B
Nix
35 lines
811 B
Nix
{ config, ... }:
|
|
{
|
|
sops.age.sshKeyPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ];
|
|
|
|
environment.persistence."/persist" = {
|
|
directories = [
|
|
"/var/cache/restic-backups-s3"
|
|
"/var/lib/forgejo"
|
|
"/var/lib/tailscale"
|
|
"/var/lib/goatcounter"
|
|
"/var/log"
|
|
"/var/lib/nixos"
|
|
"/var/lib/docker"
|
|
"/var/lib/authelia-main"
|
|
"/var/lib/caddy/.local/share/caddy"
|
|
"/var/lib/vaultwarden"
|
|
|
|
{
|
|
directory = "/var/lib/lldap";
|
|
user = "lldap";
|
|
group = "lldap";
|
|
mode = "0700";
|
|
}
|
|
];
|
|
|
|
files = [
|
|
"/etc/machine-id"
|
|
"/etc/ssh/ssh_host_rsa_key.pub"
|
|
"/etc/ssh/ssh_host_rsa_key"
|
|
"/etc/ssh/ssh_host_ed25519_key"
|
|
"/etc/ssh/ssh_host_ed25519_key.pub"
|
|
"/var/lib/systemd/random-seed"
|
|
];
|
|
};
|
|
}
|