diff options
Diffstat (limited to 'hosts/enode/impermenance.nix')
| -rw-r--r-- | hosts/enode/impermenance.nix | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/hosts/enode/impermenance.nix b/hosts/enode/impermenance.nix index 3401e8e..20df233 100644 --- a/hosts/enode/impermenance.nix +++ b/hosts/enode/impermenance.nix @@ -1,4 +1,8 @@ -{ utils, ... }: { +{ config, utils, ... }: +let + ssh-host-keys = map (k: k.path) (builtins.attrValues config.services.openssh.hostKeys); +in +{ # Use /var/lib/persist as the persistence root, matching Disko's mountpoint environment.persistence."/var/lib/persist" = { hideMounts = true; @@ -6,6 +10,7 @@ "/var/lib/nixos" "/var/lib/systemd/coredump" "/var/lib/systemd/timers" + "/var/lib/systemd/linger" "/var/lib/backups" "/var/lib/headscale" @@ -18,10 +23,12 @@ } ]; files = [ + "/var/lib/systemd/random-seed" "/etc/machine-id" "/etc/shadow" "/etc/passwd" - ]; + ] + ++ ssh-host-keys; }; boot.initrd.systemd.services.wipe-root = { |