cooking

modules/system/impermanence.nix

@@ -2,21 +2,97 @@
   pkgs,
   lib,
   config,
+  inputs,
   ...
 }:
 let
   cfg = config.xyno.impermanence;
+  genImpermanenceCfg = cfg: {
+
+    hideMounts = true;
+    directories = [
+      "/var/log"
+      "/var/lib/systemd/coredump"
+
+    ]
+    ++ cfg.extraDirectories;
+    files = [
+      "/etc/machine-id"
+
+    ]
+    ++ cfg.extraFiles;
+    users.${config.xyno.system.user.name} = {
+      directories = [
+        "Downloads"
+        "Music"
+        "Pictures"
+        "Documents"
+        "Videos"
+        "docs"
+        "proj"
+        "git"
+        {
+          directory = ".gnupg";
+          mode = "0700";
+        }
+        {
+          directory = ".ssh";
+          mode = "0700";
+        }
+        {
+          directory = ".local/share/keyrings";
+          mode = "0700";
+        }
+        ".local/share/direnv"
+      ]
+      ++ cfg.user.extraDirectories;
+      files = cfg.user.extraFiles;
+    };
+  };
+
 in
 {
   options.xyno.impermanence = {
     enable = lib.mkEnableOption "erase all your darlings (they hate you anyways)";
     extraFiles = lib.mkOption { type = lib.types.listOf lib.types.str; };
     extraDirectories = lib.mkOption { type = lib.types.listOf lib.types.str; };
+    user = {
+      extraFiles = lib.mkOption { type = lib.types.listOf lib.types.str; };
+      extraDirectories = lib.mkOption { type = lib.types.listOf lib.types.str; };
+    };
+    # have a seperate impermanence tree for "cache" files that can just be deleted if wanted
+    cache = {
+      extraFiles = lib.mkOption { type = lib.types.listOf lib.types.str; };
+      extraDirectories = lib.mkOption { type = lib.types.listOf lib.types.str; };
+      user = {
+        extraFiles = lib.mkOption { type = lib.types.listOf lib.types.str; };
+        extraDirectories = lib.mkOption { type = lib.types.listOf lib.types.str; };
+      };
+
+    };
   };
   config = lib.mkIf cfg.enable {
-    imports = [ ]; # TODO
-
-    impermanence.extraFiles = cfg.extraFiles;
-    impermanence.extraDirectories = cfg.extraDirectories;
+    imports = [
+      inputs.impermanence.nixosModules.impermanence
+    ];
+    xyno.impermanence.cache.extraDirectories = [ "/var/cache" ];
+    xyno.impermanence.cache.user.extraDirectories = [ ".cache" ];
+    environment.persistence."/persistent" = genImpermanenceCfg cfg;
+    environment.persistence."/persistent/cache" = genImpermanenceCfg cfg.cache;
+    system.activationScripts."createPersistentStorageDirs".deps = [
+      "var-lib-private-permissions"
+      "users"
+      "groups"
+    ];
+    # https://github.com/nix-community/impermanence/issues/254#issuecomment-2683859091
+    system.activationScripts = {
+      "var-lib-private-permissions" = {
+        deps = [ "specialfs" ];
+        text = ''
+          mkdir -p /persistent/var/lib/private
+          chmod 0700 /persistent/var/lib/private
+        '';
+      };
+    };
   };
 }

modules/system/user.nix

@@ -30,6 +30,7 @@ in
         "tape"
         "uucp"
         "wireshark"
+        "lock"
 
       ];