Added Impermanence to services runned by cyper-controller

2026-06-28 15:02:42 +02:00
parent bbf95a5a8c
commit a292eb6b09
15 changed files with 205 additions and 25 deletions
@@ -29,6 +29,33 @@ let
  ];
 in
 {
+  environment.persistence."/persist".directories = [
+    {
+      directory = "/var/lib/flame-phil";
+      user = "root";
+      group = "root";
+      mode = "0755";
+    }
+    {
+      directory = "/var/lib/flame-calvin";
+      user = "root";
+      group = "root";
+      mode = "0755";
+    }
+    {
+      directory = "/var/lib/docker";
+      user = "root";
+      group = "root";
+      mode = "0710";
+    }
+    {
+      directory = "/var/lib/private";
+      user = "root";
+      group = "root";
+      mode = "0700";
+    }
+  ];
+
  sops.secrets = lib.listToAttrs (
    map ({ name, ... }: lib.nameValuePair "flame_${name}_password" { }) instances
  );