From d4bf84aa8d41f1bc12bdc49c10a0afdfb87f9f07 Mon Sep 17 00:00:00 2001 From: Baitinq Date: Sat, 6 Aug 2022 12:02:36 +0200 Subject: Phobos: Change filesystem to be encrypted+stateless --- hosts/phobos/default.nix | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'hosts/phobos/default.nix') diff --git a/hosts/phobos/default.nix b/hosts/phobos/default.nix index 5bdd524..c31d832 100644 --- a/hosts/phobos/default.nix +++ b/hosts/phobos/default.nix @@ -1,6 +1,8 @@ { config, pkgs, lib, secrets, hostname, inputs, user, ... }: { imports = [ + "${inputs.impermanence}/nixos.nix" + ./hardware.nix ../../modules/bluetooth @@ -35,6 +37,17 @@ ''; */ + environment.persistence."/persist" = { + directories = [ + "/var/log" + "/var/lib" + ]; + files = [ + "/etc/machine-id" + "/etc/nix/id_rsa" + ]; + }; + environment.etc."nix-index/files".source = inputs.nix-index.legacyPackages.x86_64-linux.database; } -- cgit 1.4.1