mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-04-19 23:41:21 +02:00
b382999a70
refactor: Use hyphen(`-`) for variable names & folder names(except Python), replace all unserscore(`_`) with hyphen(`-`).
76 lines
1.8 KiB
Nix
76 lines
1.8 KiB
Nix
{
|
|
impermanence,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
imports = [
|
|
impermanence.nixosModules.impermanence
|
|
];
|
|
|
|
environment.systemPackages = [
|
|
# `sudo ncdu -x /`
|
|
pkgs.ncdu
|
|
];
|
|
|
|
# There are two ways to clear the root filesystem on every boot:
|
|
## 1. use tmpfs for /
|
|
## 2. (btrfs/zfs only)take a blank snapshot of the root filesystem and revert to it on every boot via:
|
|
## boot.initrd.postDeviceCommands = ''
|
|
## mkdir -p /run/mymount
|
|
## mount -o subvol=/ /dev/disk/by-uuid/UUID /run/mymount
|
|
## btrfs subvolume delete /run/mymount
|
|
## btrfs subvolume snapshot / /run/mymount
|
|
## '';
|
|
#
|
|
# See also https://grahamc.com/blog/erase-your-darlings/
|
|
|
|
# NOTE: impermanence only mounts the directory/file list below to /persistent
|
|
# If the directory/file already exists in the root filesystem, you should
|
|
# move those files/directories to /persistent first!
|
|
environment.persistence."/persistent" = {
|
|
# sets the mount option x-gvfs-hide on all the bind mounts
|
|
# to hide them from the file manager
|
|
hideMounts = true;
|
|
directories = [
|
|
"/etc/NetworkManager/system-connections"
|
|
"/etc/ssh"
|
|
"/etc/nix/inputs"
|
|
"/etc/secureboot" # lanzaboote - secure boot
|
|
# my secrets
|
|
"/etc/agenix/"
|
|
|
|
"/var/log"
|
|
"/var/lib"
|
|
];
|
|
files = [
|
|
"/etc/machine-id"
|
|
];
|
|
|
|
# the following directories will be passed to /persistent/home/$USER
|
|
users.ryan = {
|
|
directories = [
|
|
"codes"
|
|
"nix-config"
|
|
"tmp"
|
|
|
|
{
|
|
directory = ".ssh";
|
|
mode = "0700";
|
|
}
|
|
|
|
# neovim / remmina / flatpak / ...
|
|
".local/share"
|
|
".local/state"
|
|
|
|
# language package managers
|
|
".npm"
|
|
".conda" # generated by `conda-shell`
|
|
"go"
|
|
];
|
|
files = [
|
|
".config/nushell/history.txt"
|
|
];
|
|
};
|
|
};
|
|
}
|