From 8d3a7982a7fd2da4a4b551f18312ecc8bc804731 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Wed, 28 Oct 2026 20:32:22 +0100
Subject: enode: enable impersistence

---
 hosts/enode/default.nix      |  1 +
 hosts/enode/impermenance.nix | 12 +++---------
 2 files changed, 4 insertions(+), 9 deletions(-)

diff --git a/hosts/enode/default.nix b/hosts/enode/default.nix
index 27e141f..1a68703 100644
--- a/hosts/enode/default.nix
+++ b/hosts/enode/default.nix
@@ -18,6 +18,7 @@ in
     ./headscale.nix
     ./caddy.nix
     ./disko.nix
+    ./impermenance.nix
   ];
 
   # disable local builds of anything, machine doesn't have enough RAM
diff --git a/hosts/enode/impermenance.nix b/hosts/enode/impermenance.nix
index 627ecd2..ba55264 100644
--- a/hosts/enode/impermenance.nix
+++ b/hosts/enode/impermenance.nix
@@ -1,11 +1,10 @@
 { config, ... }:
 let
-  ssh-host-keys = map (k: k.path) (builtins.attrValues config.services.openssh.hostKeys);
+  ssh-host-keys = map (k: k.path) config.services.openssh.hostKeys;
 in
 {
-  # Use /var/lib/persist as the persistence root, matching Disko's mountpoint
   environment.persistence."/var/lib/persist" = {
-    hideMounts = true;
+    # hideMounts = true;
     directories = [
       "/var/lib/nixos"
       "/var/lib/systemd/coredump"
@@ -14,13 +13,8 @@ in
 
       "/var/lib/backups"
       "/var/lib/headscale"
+      "/var/lib/tailscale"
       "/var/lib/caddy" # for certs
-      {
-        directory = "/var/lib/secrets";
-        user = "root";
-        group = "root";
-        mode = "u=rwx,g=,o=";
-      }
     ];
     files = [
       "/var/lib/systemd/random-seed"
-- 
cgit v1.3.1