prescientmoon/satellite
prescientmoon/satellite
1
Fork 0
Code Activity

Finalize calypso install!

Browse source
This commit is contained in:
prescientmoon 2024-08-26 23:30:04 +02:00
parent b67cf3fde7
commit 2357c5d3d6
Signed by: prescientmoon
SSH key fingerprint: SHA256:WFp/cO76nbarETAoQcQXuV+0h7XJsEsOCI0UsyPIy6U
5 changed files with 26 additions and 12 deletions
hosts/nixos
calypso/services
snapper.nix
common/global/services
openssh.nix

4
hosts/nixos/calypso/services/snapper.nix
View file

@ -6,7 +6,7 @@
configs = {
# {{{ Data
data = {
SUBVOLUME = "/root/persist/data";
SUBVOLUME = "/persist/data";
TIMELINE_CREATE = true;
TIMELINE_CLEANUP = true;
BACKGROUND_COMPARISON = "yes";
@ -20,7 +20,7 @@
# }}}
# {{{ State
state = {
SUBVOLUME = "/root/persist/state";
SUBVOLUME = "/persist/state";
TIMELINE_CREATE = true;
TIMELINE_CLEANUP = true;
BACKGROUND_COMPARISON = "yes";

4
hosts/nixos/common/global/services/openssh.nix
View file

@ -68,5 +68,7 @@ in
services.fail2ban.enable = true;
# Makes it easy to copy host keys at install time without messing up permissions
systemd.tmpfiles.rules = [ "d /persist/state/etc/ssh" ];
systemd.tmpfiles.rules = [
"d /persist/state/etc/ssh"
] ++ (lib.lists.forEach config.services.openssh.hostKeys (key: "e ${key.path} 0700"));
}